Huntsman Security today announced its cyber security predictions for 2025, including industry change driven by new regulations, the evolving relationship between AI and cyber security, and new approaches that will make organisations more resilient.
Regulatory change will focus attention on compliance
With new regulations coming into force, including NIS2 at the end of 2024 and the Digital Operational Resilience Act in January, compliance will be a key focus for 2025. New rules around critical infrastructure, personal privacy rights, and data protection will create tension between many existing corporate business models and legislative compliance. Several matters before international Courts for non-compliance with current cyber security regulations will help establish the regulatory guardrails for in 2025.
AI will challenge cyber security
Cyber criminals are already using AI to enhance phishing emails, find vulnerabilities and exploit code, while defenders adopt AI techniques to better detect and understand threats. At the same time, easy access to AI in business could open new threats. To avoid this, the AI sector must become more disciplined in 2025, with the provenance of the data and AI “assistance” becoming important considerations to add transparency around how AI is assisting specific cyber security activities.
Secure-by-Design
Secure-by-Design will bring big changes in 2025. Software design and development activities, alongside manufacturing facilities and the processes within them; some are already being hardened and made more resilient. As such, Software Development Life Cycle (SDLC) frameworks will need to adapt, to accommodate the oversight of quality processes as they shift from a “nice to have” to a requirement. Secure-by-Design uplift programs will be worth watching throughout the year.
The rise of Continuous Threat Exposure Management (CTEM)
In 2025, organisations will shift towards newer risk assessment models that measure cyber resilience against best-practice guidelines. Threat Exposure Management will see some organisations introduce automated processes to identify the vulnerabilities relating to their IT assets and systems, prioritise importance, and “mobilise” mitigation efforts to limit the risk of disruption from anticipated threats.
“2025 will remain challenging for both the cyber security industry and organisations trying to stay secure. New governments and regulations must continue to encourage synergy between security and enterprise resilience,” commented Peter Woollacott, CEO of Huntsman Security. “Using new cyber security methodologies will make risk mitigation routine, because businesses must assume it’s a case of when they are breached, not if. Putting in place the right processes and defences now could help reduce the chances of organisational chaos taking hold if an attack succeeds.”
To read Huntsman Security’s predictions in full visit https://huntsmansecurity.com/blog/cyber-security-predictions-for-2025/
About Huntsman Security
Since 1999, Huntsman Security has been on the cutting edge of cyber security software development, serving some of the most sensitive and secure intelligence, defence and criminal justice environments in the world. With offices in Australia and the UK, and operations in Japan, we deliver risk management, monitoring and response technology through utilising machine learning and high speed in-stream processing to collect and contextualise security data in real time. Our most sought-after products, used by government departments and commercial organisations worldwide, include:
- SmartCheck for Ransomware: a quick & easy solution to measure and assess an organisation’s state of readiness and defence against malware attacks
- Essential 8 Auditor: an on-demand cyber vulnerability & maturity assessment tool, for quick implementation and use
- Essential 8 Scorecard: a continuous risk reduction & cyber security control measurement software enabling dynamic cyber risk management
- Enterprise SIEM & MSSP SIEM: a mission critical cyber security analytics application, providing a complete cyber threat detection, analysis, incident management and reporting system
View source version on businesswire.com: https://www.businesswire.com/news/home/20241118187149/en/
Contact details:
Spark Communications +44 (0) 20 7436 0420 [email protected]
