• Gartner Says Security and Risk Management Leaders Must Leverage the Automation Continuum to Create New Value for Their Organizations
Leveraging the automation continuum is security and risk management leaders’ latest imperative in creating and preserving value at their organization, according to Gartner, Inc.
Automation is All Around Us
Automation is already all around us — and it is starting to impact the security and risk world in two ways:
- As an enabler to the security and risk function itself
- As new security frontiers that need to be acknowledged and understood
“Automation follows a continuum of sophistication and complexity, and can use a number of techniques, either stand-alone or in combination,” said David Mahdi, senior research director at Gartner. “For example, robotic process automation currently works best in task-centric environments, but process automation is evolving to increasingly powerful bots, and eventually to autonomous process orchestration.”
By 2021, 17% of the average organization’s revenue will be devoted to digital business initiatives, and by 2022, content creators will produce more than 30% of their digital content with the aid of AI content-generation techniques.
“What this means to security and risk management professionals is that our organizations are likely building solutions and making technology-related choices often without realizing the risk implications of what they are doing,” said Mr. Mahdi.
Balancing Emerging Technologies and People
“Automation is just the beginning. Emerging technologies will change everything and impact security and risk directly,” said Beth Schumaecker, director, advisory at Gartner. “Our reliance on data is ever increasing, yet it poses one of the largest privacy risks to organizations. In the next two years, half of large industrial companies will use some emerging form of digital twins, which will also need to be secured.”
The demands of these emerging technologies and digital transformation introduce new talent challenges for the security function, altering how organizations expect security to be delivered.
“Digital transformation demands that security staff play a wider range of roles, from strategic consultants to threat profilers to product managers, which in turn require new skills and competencies,” said Ms. Schumaecker. “It’s already impossible to fill all our existing vacancies.”
Mission-Critical Areas in Automation
The three mission-critical areas in today’s enterprises are automation in identity, data and new products or services development:
- Identity is the foundation for all other security controls, especially as the business increasingly moves to cloud environments. Identity decisions should always remain within the organization’s control, whether it is about humans or machines.
- Data is what organizations now depend on for virtually every transaction, and it needs to be shared as much as it needs to be protected.
- New products and services developed as emerging technologies gain a stronghold, prompting organizations to adapt and push the envelope.
About Gartner Security & Risk Management Summits
IT security trends and priorities are being discussed at the Gartner Security & Risk Management Summit 2019 taking place in National Harbor, Maryland. The Gartner Security & Risk Management Summit will also take place August 5-7 in Tokyo, August 13-14 in Sao Paulo, August 19-20 in Sydney, August 26-27 in Mumbai, September 9-11 in London, and October 28-29 in Dubai.
