RSAC 2024: Lo más candente

The excitement at this year’s RSA Conference was palpable. Conversations were more intense, branding was bolder, and insights were smarter than ever. The week was filled with incredible keynotes, informative presentations, and great networking. 

Like many others, my time was spent with customers, partners, and prospects. I also got to share the stage with industry peers, covering what’s what in cyber. In both instances, I found that topics like AI and post-quantum were top of mind and widely discussed. 

I kicked off the week participating in a panel co-hosted by Keyfactor and Devo Security. Insight Partners managing director Steve Ward moderated a discussion about how CISOs can best navigate a turbulent enterprise landscape. Joined by CISOs from Devo Security, Avnet, and Semperis, our group explored the changing role of the Chief Information Security Officer and how emerging threats, new SEC regulations, and resource constraints are creating more hurdles for these security leaders. 

Lo que me pareció más interesante de ese debate fue la división entre el CISO y el resto de la C-Suite. Es evidente que los CISO no pueden serlo todo para todos en la empresa. Por el contrario, estos líderes deben desempeñar un papel interfuncional que proteja la empresa. Aportar una mentalidad basada en el riesgo y que dé prioridad a la empresa es clave, al tiempo que se confía en los individuos más técnicos para tomar decisiones tecnológicas inteligentes. 

In anticipation of NIST’s post-quantum encryption standards, RSA was also a prime location for many cybersecurity professionals asking how to best prepare. As I told many of these individuals during 1:1 conversations, because quantum computing will significantly impact widely used security protocols and algorithms, preparing for “Q Day” needs to happen now. This is especially true since we’re seeing increased activity of “harvest now, decrypt later” instances where threat actors are harvesting and storing encrypted data with future plans to decrypt in a post-quantum reality. 

Como era de esperar, el tema de la IA ocupó un lugar destacado durante toda la semana, desde los vectores de seguridad de GenAI a través de la lente del ciberdelincuente hasta las formas en que la IA está mejorando la innovación desde el punto de vista de los productos. Gran parte de lo que se dice sobre la IA en la ciberseguridad es todavía rudimentario. Sin embargo, la promesa y el potencial de la IA siguen existiendo, al igual que las amenazas potenciales que podría presentar, y todavía hay oportunidades para la aplicación en el mundo real y el despliegue real. 

RSAC 2024 was one for the books, and I am especially looking forward to next year. But for now, it’s on to preparing for Black Hat. I hope to see many of you in balmy Las Vegas this August.