There is increasing need for cybersecurity consolidation: Palo Alto Networks’ CIO

Rapid innovation has put a stain on the enterprise security position. With new AI-enabled techniques, ransomware and extortion actors are utilising more aggressive tactics to pressure organisations. US-based Palo Alto Networks’ 2023 report on ransomware found that India, being the second most targeted country in the APJ region, is at substantial risk. 

TechCircle interviewed Meerah Rajavel, chief information officer (CIO) at Palo Alto Networks, to understand the evolving security landscape. Edited excerpts:

What are the most pressing cybersecurity needs among your APAC clients in particular?

We recently concluded our annual Ignite event and I would say a few major themes emerged in my interactions with the clients. Firstly, ASEAN countries, in some fashion or other, are taking a hard look at their digital agenda where AI seems to play a key role. Every customer I spoke to wanted to know more about how they can leverage AI to protect their security posture.

Further, there is an increasing need for cybersecurity consolidation. For other industries like enterprise resource planning – there are players like Oracle and SAP; for human resource management, you have Workday; for customer relationship management there is Salesforce. However, it is not the same for cybersecurity. It has been a fragmented industry for too long; you have multiple players who claim to offer security solutions from a different angle. 

Tell us more about the need for cybersecurity consolidation.

In today’s cybersecurity landscape, securing networks, data, devices, user identities, and system identities is crucial. With the rise of bots acting on users' behalf, ensuring appropriate access is vital. Numerous vendors specialize in various security aspects: endpoint protection, firewalls, SASE, and more, addressing diverse attack vectors from cloud security to identity management. 

Each new threat has spurred innovation, resulting in a plethora of specialized tools targeting specific vulnerabilities. However, this diversity has increased complexity, requiring cybersecurity practitioners to integrate these solutions for a comprehensive defense. Furthermore, over the past 20 years, cybersecurity threats have evolved from simple antivirus issues to complex cloud-based threats, necessitating sophisticated solutions like attack surface management and user behaviour analytics.
 
Effective security operations require synthesising vast amounts of data to identify, stop, and remediate threats. This integration is facilitated by platforms combining network, cloud, and endpoint security, all powered by AI and machine learning to handle immense data volumes.

While AI has emerged as an important technology in improving and securing organisations, are there any disadvantages?

AI is increasingly being used by adversaries, significantly accelerating attack timelines. Previously, it took around 12 hours on average to build a ransomware; today, it takes just two hours, and within the next two years, this could drop to less than 30 minutes. Similarly, the process of extracting data has drastically shortened. It once took about nine weeks from the initial recon to data extraction, but now it's down to about a day. With advancements in AI, these attacks could become near-instantaneous, essentially turning into drive-by incidents.

How has the role of a CIO evolved over the years?

It's a fascinating job for me. As a CIO, you're at the forefront of industry changes, driving outcomes that grow revenue, enhance efficiency, and improve experiences. Digitalisation has ushered in greater efficiency and speed, directly contributing to faster revenue growth. Another key aspect is creating a phenomenal experience by reducing friction for employees. Over the past decades, we've evolved from simple process engineering and automation to sophisticated web, social, and mobile technologies. The challenge and excitement lie in leveraging these innovations to make them relevant for your business and drive meaningful outcomes.