News
Hybrid Cloud Data Security in 2023 - Commentary from Claude Mandy
December 2022 by Claude Mandy, former Gartner analyst and now Chief Evangelist for Data Security at Symmetry Systems
As 2022 comes to a close, some predictions about what to expect in hybrid cloud and data security heading into 2023. These insights come from Claude Mandy, former Gartner analyst and now Chief Evangelist for Data Security at
Symmetry Systems,
a data security posture management (DSPM) hybrid cloud data security platform designed to extend the zero trust philosophy to protecting data in AWS, GCP, Azure services, and on-premises databases.
Transparency in 2023 breaches
CISOs will be radically transparent about data breaches as they occur. Organizations have historically only disclosed breaches at a certain level of severity, but in 2023 CISOs will be more upfront about breaches, regardless of size or damage. With blunders like the former Uber CISO’s conviction on federal charges for covering up a data breach or the Twitter whistleblower testimony on the company’s broken defenses against hackers, security leaders took note of what NOT to do: hide or misrepresent a breach, which can lead to facing felony charges. A radical shift will occur where all organizations will be open and transparent in the face of a breach, resulting in about a 20% decrease in the lag time between disclosure of a breach and preliminary analysis of the impact to customers.
Data Security Posture Management (DSPM)
As organizations solve their current cloud configuration issues, they will also begin shifting to focus on the growing importance of data being collected and used by organizations. Through
2023, organizations will increase investments in tools that reduce the potential for data leakage, as opposed to solely detecting that a leakage has occurred. This will result in all market leading identity providers acquiring or investing in both DSPM solution
and a cloud infrastructure entitlement management solution.
The evolving perspective of the CISO
By December 2023, 20% of CISOs will include a specific line item for data security in their strategy and budgets that includes headcount and technology. Additionally, through December 2024, CISOs who have adopted vendor consolidation approaches will look to layer in additional best of breed solutions as standalone vendors adopt more open interfaces.
