Technology Record - Issue 28: Spring 2023

INTERVIEW continually create new use cases, detection rules and response playbooks to enable them to keep pace with the ever-evolving threat surface.” In addition, Velleca advises that enterprises adopt cloud-native extended detection and response (XDR) solutions. “These solutions can aggregate security data from across the entire IT environment, including the security information and event management system, applications, IoT and OT devices, and any other endpoints to help teams detect and respond to threats faster,” he says. “In future, we expect that XDR services will become verticalised to provide more targeted protection for organisations operating in different industries.” Moving their SOCs to the cloud will not only help businesses to optimise asset protection; it will enable them to lower cybersecurity management costs too. “Many of the security products that enterprises have been buying in recent years are already natively available in the cloud and include a whole range of new built-in tools, such as artificial intelligence, to help them better address security risks,” says Velleca. “Therefore, moving to the cloud can significantly strengthen their security posture, while also improving operational processes and lowering costs.” Working with an MDR provider like CyberProof also helps enterprises to overcome another fundamental security challenge caused by cloud migrations: a lack of in-house experts with the knowledge and skills to address all the new and emerging cyberthreats. “Many cybersecurity employees come from an infrastructure world where they were focused on setting up firewalls and other intrusion prevention systems to defend IT networks, but now most of this is handled in the cloud instead,” says Velleca. “Today, these employees need to be able to configure applications and devices with code and confidently work with with microservices, zero-trust frameworks and more. This requires them to build a fundamentally different skill set, one which is much more like that of a software developer.” Upskilling current employees or hiring new staff is often prohibitively time-consuming and expensive, but partnering with an MDR provider like CyberProof gives organisations instant access to skilled experts who can deliver continuous threat hunting, detection, analysis and response services. “We combine this human expertise with our CyberProof Defense Center, which is integrated with Microsoft Sentinel and Defender,” says Velleca. “This enables us to deliver 24/7 targeted threat hunting, threat intelligence analysis, extended endpoint detection and response, and other services to protect our customers’ assets.” Given that many businesses are already well into their cloud transformation journeys and are now facing pressures caused by increasingly sophisticated hackers, the pandemic, geopolitical instability and an impending global recession, they must act fast to reap the benefits of managed XDR and other cybersecurity services. “We’re in a unique time where several factors have come together to create an opportunity for CIOs and CISOs to finally align their priorities and create stronger, more flexible, resilient and intelligent cyber defence and response strategies,” says Velleca. “By doing this and investing in cloud-native solutions, they can drive real change and safeguard their organisations’ critical assets, while simultaneously reducing costs.” “ The key to developing robust and highly effective security solutions is to think like a hacker” 70