Top 10 security predictions for 2006

March 2006 Information Security

As the importance of information security continues to rise, organisations around the globe are looking at revising their existing strategies to ensure that their information assets are optimally secured.

Gary Middleton, general manager of security solutions at Dimension Data, outlines 10 predictions that will impact the information security landscape in 2006:

1. Expect more damages, but fewer epidemics. Infection rates are likely to increase in 2006, and organisations can therefore no longer rely on the media or mass attacks to alert them of problems. The assumption that no news is good news will lead to a false sense of security.

2. Attacks will move beyond Microsoft's operating system. More applications and other infrastructure elements within organisations will be targeted, resulting in increased workloads to patch vulnerabilities.

3. Spyware will remain a major issue. Organisations can expect more spyware infections, which will deplete bandwidth, drive up the number of helpdesk calls and ultimately affect employee productivity. There will be a greater need to invest in additional technology to combat spyware.

4. Instant Messenger (IM) and Peer-to-Peer (P2P) will become a bigger headache. Widespread adoption and use of IM and P2P applications can expose organisations to new threats. Organisations need to be aware of, secure and manage these technologies.

5. Messaging security will get serious. Two years ago, organisations invested in e-mail security products that controlled spam. Today, the focus has shifted towards solutions that incorporate policy compliance and encryption capabilities - in addition to the ability to deal with viruses and spam.

6. Boards will pay more attention to security. In line with the global trend of good governance practices, boards continue to pay greater attention to ensuring that their organisations' information assets are protected from a growing number of internal and external threats.

7. Wireless security will get more attention. As the end-user demand for mobility continues to grow, organisations need to ensure that their wireless access points are secured from unauthorised access.

8. Patching will become selective. The number of patches that are released for operating systems, applications and other IT infrastructure elements continues to grow at an alarming rate. Implementing all patches is becoming too cumbersome and costly, and organisations will start to selectively patch their IT assets based on value and the particular threats that they face.

9. The trend towards secure infrastructure will continue. As security becomes embedded in the infrastructure layer; we are witnessing the convergence of network, systems and security management as a single competence. As a result, customers will increasingly look at one provider to supply, support, manage and secure the end-to-end infrastructure.

10. There will be a greater focus on end-point security. There is going to be a much greater focus on how insecure end-points; such as laptops, desktops and other devices; connect to the network.

For more information contact Anna Watson, Dimension Data SA, 011 575 4509, [email protected]





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

What are MFA fatigue attacks, and how can they be prevented?
Information Security
Multifactor authentication is a security measure that requires users to provide a second form of verification before they can log into a corporate network. It has long been considered essential for keeping fraudsters out. However, cybercriminals have been discovering clever ways to bypass it.

Read more...
SA's cybersecurity risks to watch
Information Security
The persistent myth is that cybercrime only targets the biggest companies and economies, but cybercriminals are not bound by geography, and rapidly digitising economies lure them in large numbers.

Read more...
Cyber insurance a key component in cyber defence strategies
Information Security
[Sponsored] Cyber insurance has become a key part of South African organisations’ risk reduction strategies, driven by the need for additional financial protection and contingency plans in the event of a cyber incident.

Read more...
Deception technology crucial to unmasking data theft
Information Security Security Services & Risk Management
The ‘silent theft’ of data is an increasingly prevalent cyber threat to businesses, driving the ongoing leakage of personal information in the public domain through undetected attacks that cannot even be policed by data privacy legislation.

Read more...
Data security and privacy in global mobility
Security Services & Risk Management Information Security
Data security and privacy in today’s interconnected world is of paramount importance. In the realm of global mobility, where individuals and organisations traverse borders for various reasons, safeguarding sensitive information becomes an even more critical imperative.

Read more...
Sophos celebrates partners and cybersecurity innovation at annual conference
News & Events Information Security
[Sponsored] Sun City hosted Sophos' annual partner event this year, which took place from 12 to 14 March. Sophos’ South African cybersecurity distributors and resellers gathered for an engaging two-day conference.

Read more...
The CIPC hack has potentially serious consequences
Editor's Choice Information Security
A cyber breach at the South African Companies and Intellectual Property Commission (CIPC) has put millions of companies at risk. The organisation holds a vast database of registration details, including sensitive data like ID numbers, addresses, and contact information.

Read more...
Navigating South Africa's cybersecurity regulations
Sophos Information Security Infrastructure
[Sponsored] Data privacy and compliance are not just buzzwords; they are essential components of a robust cybersecurity strategy that cannot be ignored. Understanding and adhering to local data protection laws and regulations becomes paramount.

Read more...
AI augmentation in security software and the resistance to IT
Security Services & Risk Management Information Security
The integration of AI technology into security software has been met with resistance. In this, the first in a series of two articles, Paul Meyer explores the challenges and obstacles that must be overcome to empower AI-enabled, human-centric decision-making.

Read more...
Milestone Systems joins CVE programme
Milestone Systems News & Events Information Security
Milestone Systems has partnered with the Common Vulnerability and Exposures (CVE) Programme as a CVE Numbering Authority (CNA), to assist the programme to find, describe, and catalogue known cybersecurity issues.

Read more...