Time to Redefine Cybersecurity - Adding T - Trust as new Tenant to “CIA” and make it “I-ACT

By Lalit Ahluwalia on 28 Nov 2024 @ Blackhat
🔗 Link
risk-management security-architecture security-governance compliance-governance
Focus Areas: Compliance & Governance , DevSecOps , Risk Management , Security Architecture , Security Awareness , Security Governance

Abstract

The digital world is rapidly evolving. Thanks to real-time security news on digital transformations, it is now evident that cyber-attacks, data leaks, and vulnerability risks have had a fair share in “staining” the entire digital landscape as our reliance on technology increases. This begs the question: are we really adapting to these rapid changes or just following the status quo?

Here’s something you want to think about. What if I told you that we may be missing a significant point? Sticking to the generally accepted cybersecurity tenets encourages a focus ONLY on confidentiality, integrity, and availability - completely eliminating the true concept of “TRUST” in digital services. Redefining these tenets will not only take us a step closer to a more balanced digital matrix, but will eventually bridge the gap between cybersecurity and digital trust, and build resilience inside out.

This session discusses the need to redefine cybersecurity and explains why adding a “Trust” tenet to the conventional CIA triad will make a lot of difference in cybersecurity and security posture management as we know it today.