Be first to read the latest tech news, Industry Leader's Insights, and CIO interviews of medium and large enterprises exclusively from The Cyber Security Review
Strategic Cybersecurity Forecasts from Deloitte for 2023
The Cyber Security Review | Wednesday, November 23, 2022
Deloitte's leading analysts recently spoke with VentureBeat to share their top strategic cybersecurity predictions for 2023.
FREMONT, CA:Cybersecurity is difficult. Uber (NYSE: UBER), Cisco (NASDAQ: CSCO), Twilio (NYSE: TWLO), Rockstar Games (NASDAQ: TTWO), and other companies have all had data breaches as a result of cyberattacks in recent months. Leading Deloitte experts recently shared their top strategic cybersecurity forecasts for 2023 in a conversation with VentureBeat.
Stay ahead of the industry with exclusive feature stories on the top companies, expert insights and the latest news delivered straight to your inbox. Subscribe today.
The forecasts made by Deloitte's analysts cover a wide range of topics, including how crucial organisational resilience, future-ready preparation, and cybersecurity will be for businesses to effectively manage their exposure to threat actors in the future.
Board Cybersecurity Readiness Will Become Business Imperative
The role board of directors play in cyber risk supervision is becoming more and more crucial as the cyber threat landscape develops and becomes more complex. The board can assist in positioning cyber as a strategic enabler to develop deeper relationships among customers, vendors, employees, and shareholders as firms prioritise consumer trust alongside ongoing growth.
Boards can more efficiently supervise cybersecurity risk management efforts by being aware of the benefit of a strong cybersecurity posture on financial impact. Recent SEC suggestions that strongly emphasise strategy, governance, risk management, and timely investor communication should urge executives to think about reshaping their present and future business models with cyber risk and the board at the forefront of these activities.
Connected Device Visibility and Security
Over the years, most enterprises have adopted IoT-connected devices, but frequently without proper security governance. The attack surface for the networks and ecosystems to which they are connected also expands as the number of connected devices increases, posing exponentially more hazards to security, data, and privacy.
Leading companies will prioritise connected device cyber practises in the upcoming year by establishing or updating pertinent policies and procedures, updating inventories of their IoT-connected devices, monitoring and patching devices, enhancing device procurement and disposal procedures with security in mind, integrating IoT and IT networks, and monitoring connected devices more closely to further secure those endpoints, manage vulnerabilities, and respond to incidents.
Security in Emerging Technologies Will be Critical in their Adoption
As IoT, Blockchain, 5G, quantum, and other technology applications grow more widespread, cybersecurity concerns related to these technologies are also becoming more developed.
The management of an organisation's strategic growth efforts will be greatly aided by adopting these technologies, but the organisation's ability to navigate and implement the necessary technological security measures will determine how successful they are in the long run.
Data-centric Security and Privacy Will Become Imperative to Building Brand and Customer Trust
Nearly 72 per cent of an organisation's customer engagements are digital, making digital engagement between businesses and customers a new way of life. Customers now expect to have more control over their data and enhanced openness regarding firms' policies.
Customers now expect more control over their data and greater transparency about the organisation's data handling rules, frequently in exchange for a greater willingness to contribute more data and become more engaged with the business.
As a result, enterprises have an increasing sense of urgency to facilitate trust and embrace data privacy, security, and compliance as mechanisms to support established techniques for enhancing customer experience and brand perception.
Focus of Future-forward Readiness
The previous few years have demonstrated how quickly things can change, from business priorities to industry dynamics to the geopolitical environment. This underscores the importance of being future-ready. Since change is the only thing that never changes, it gives us a chance to develop and reinvent our approaches to managing cyber risk.
There is a big possibility for enterprises to use cyber to bring additional value and competitive differentiation for their customers while preemptively tackling undiscovered dangers and threats on the horizon as a result of increased technological advancements and often shifting market trends.
Organisations must actively analyse and develop a cohesive cyber strategy to position the business to be agile enough to embrace future opportunities, whether planning for near-term market developments or complying with rising regulatory and reporting obligations.
Organisational Resilience Will Continue to be the Focus
As business continues to be digitised, businesses connect more to the global market, increasing the attack surface and the frequency and severity of disruptions. The numerous supply chain, geopolitical, environmental, and cybersecurity incidents that enterprises are currently dealing with pose a challenge to standard risk management strategies and are attracting more regulatory attention.
Organisations can use new approaches and technology to create situational awareness of emerging threats and improve their ability to respond to disruptions by leading with an integrated picture of scenarios that endanger core business operations.
Complex Supply Chain Security Risks Will Continue to Emerge
The hyperconnected global economy has forced businesses to rely significantly on their supply chains for everything from the parts that make up their physical and digital products to the services they need to carry out their daily operations.
Due to this crucial interconnectedness, supply chain security and risk transformation are essential for today's internationally connected enterprises.
A holistic approach is now needed by organisations, including moving away from point-in-time third-party evaluations and toward real-time monitoring of third-party risks and vulnerabilities in incoming packaged software and firmware components.
This can entail putting into practice cutting-edge methods for ingesting Software Bills of Materials (BOMs) and comparing the results to developing vulnerabilities, identifying risk indicators like the location of the underlying components, and making transitive relationships visible.
As a way to effectively enforce allowed third-party access to systems and data and lessen the effects of a compromised third party, organisations are concentrating on implementing and running identity and access management (IAM) and Zero Trust capabilities.
Organisations must maintain momentum in developing and maturing their supply chain security and risk transformation skills as the risks introduced into the supply chain continue to increase in complexity, scale, and frequency.
More in News
Artificial intelligence (AI) is rapidly transforming the cybersecurity landscape, bringing novel techniques to safeguarding digital assets and combatting emerging threats. The following shows the key ways that AI is affecting. cybersecurity:
Advanced threat detection: AI systems are particularly good at seeing odd patterns, which makes it possible to identify possible cyber threats early on. These dangers can include malware and highly skilled phishing attacks. Huge volumes of data, including network traffic, can be analyzed by AI algorithms, which can then be used to identify odd patterns that can point to a security breach. This feature makes it possible to identify advanced persistent threats (APTs) and zero-day attacks early on that more conventional security procedures would overlook. Because AI is capable of continual learning, these systems improve with time and can adapt to new and changing threats. This proactive approach to threat identification is essential in today's ever-evolving cybersecurity landscape.
Predictive risk analysis: Predictive analytics is the application of AI to predict possible security breaches. By processing large volumes of data and identifying patterns that may indicate future security risks, AI helps businesses proactively reinforce their defenses. AI solutions can proactively fortify the organization's defenses by employing machine learning algorithms to predict possible weaknesses and security breaches. In the ever-changing field of cybersecurity, where staying ahead of potential threats is critical to preserving strong security measures, this predictive power is invaluable.
User behavior analytics: AI examines user behavior to find compromised accounts or possible insider threats. Through the use of user behavior analytics (UBA) in cybersecurity, AI may utilize sophisticated machine learning algorithms to examine user behavior and identify irregularities. Through the identification of actions that differ from known patterns, this research aids in the identification of potential security issues, such as hacked accounts or insider threats. These systems can adjust to new patterns in user behavior thanks to AI's capacity for continual learning, which gradually improves their accuracy. Because of this, AI is a priceless tool that enables a more dynamic and sophisticated method of monitoring and protecting networks from user-related threats.
Fraud detection: AI systems are essential for identifying and stopping fraudulent activity in e-commerce and online transactions, which is implemented by,
Real-time processing: AI provides real-time transaction analysis, enabling prompt fraud identification and prevention.
Pattern recognition: AI algorithms are excellent at finding patterns and abnormalities in transaction data, which can be used to identify fraud. ...Read more
In today’s rapidly evolving digital landscape, operational technology (OT) and information technology (IT) are increasingly intertwined. As industrial environments adopt more connected systems, integrating traditional OT infrastructure such as control systems, sensors, and industrial networks with IT has become both a technological opportunity and a cybersecurity challenge.
Converged OT cybersecurity emerges as an essential strategy, merging the defensive capabilities of IT security with the unique requirements of OT systems. Organizations achieve a unified, robust approach to protect critical infrastructure, ensure operational continuity, and enhance overall business resilience.
Enhanced Operational Resilience and Threat Detection
Converged OT cybersecurity greatly enhances operational resilience by unifying the defense mechanisms across disparate systems. OT and IT security teams managed their networks independently, often resulting in gaps exploited by sophisticated cyber threats. With converged cybersecurity solutions, organizations employ a single, cohesive strategy that provides holistic protection. Integrated platforms enable continuous monitoring across both IT and OT systems, allowing security teams to detect anomalies and potential breaches in real time.
The rapid detection capability enables faster response, minimizes downtime, and protects critical processes in manufacturing, energy, and transportation sectors. Converged platforms draw insights from a diverse range of sources, leveraging AI and ML to identify patterns that may indicate emerging threats.
The platforms continuously update security models based on evolving attack methodologies, ensuring that both operational and business systems remain resilient. When a danger targets sensitive OT components, early detection and automated response protect the physical equipment and safeguard the interconnected business systems that depend on them.
Streamlined Management and Regulatory Compliance
Integrating OT and IT security reduces the complexity associated with managing two disparate systems. Organizations now enjoy centralized control through unified dashboards that present a consolidated view of security postures across all systems.
The streamlining reduces overhead, improves resource allocation, and facilitates quicker decision-making when addressing vulnerabilities or responding to incidents. With all security events captured in a single platform, IT and OT teams can collaborate more effectively and share insights that were previously siloed. Converged OT cybersecurity represents a strategic evolution in protecting modern industrial environments.
Regulatory compliance also improves under a converged framework. Stringent cybersecurity standards and operational regulations govern industries such as energy, healthcare, and transportation. Unified cybersecurity solutions help organizations meet these demands by enforcing consistent security policies and maintaining comprehensive logs for audits.
Automated compliance reporting, built into many converged platforms, reduces the manual burden on IT and operations staff while ensuring that documentation is always up to date. The integrated approach minimizes the risk of legal penalties and helps build stakeholder trust, demonstrating a commitment to secure, responsible management of critical infrastructure. ...Read more
Cybersecurity leaders are confronting a threat surface that no longer stops at networks, applications or cloud infrastructure. Public narratives now shape market trust, employee safety and financial stability at a speed and scale traditional controls were never designed to manage. Disinformation campaigns can erode confidence through coordinated social activity, impersonation, manipulated media and poisoned search or language model outputs, often faster than incident response teams can react. For executives accountable for enterprise risk, this shift creates a gap between technical security programs and the reputational and behavioral forces that increasingly determine impact.
Recent incidents have demonstrated how rapidly online narratives can trigger stock volatility, executive targeting or consumer backlash without breaching a single internal system. Social platforms, open media channels and generative systems have become an externalized attack surface where intent is obscured, attribution is difficult and volume overwhelms manual review. In regulated or trust-dependent industries such as finance, energy or healthcare, the consequences extend beyond brand damage into systemic risk. Responsibility for this domain often falls between communications, legal and security teams, leaving fragmented ownership at the moment coordination matters most.
What distinguishes effective approaches in this environment is the ability to interpret meaning rather than signals alone. Monitoring volume, keywords or engagement provides limited insight once adversaries adapt language, tone or cultural framing. Mature programs instead focus on understanding what is being said, why it matters and how quickly it may cross a threshold where intervention loses effectiveness. This requires early detection across languages and platforms, discrimination between noise and credible threat and a path from analysis to action that aligns with security decision-making rather than marketing response.
Within this emerging discipline, B rinker stands out for grounding narrative intelligence directly inside the cybersecurity risk model. Its platform is designed to analyze full conversations across open online spaces, identifying harmful narratives based on intent, context and propagation rather than surface indicators. By interpreting euphemism, irony and coordinated framing, it enables security teams to recognize disinformation and manipulation while mitigation is still feasible. The system traces narrative origin, language distribution and platform dynamics, providing clarity on how and where a threat is forming.
Beyond detection, Brinker connects analysis to response. The platform supports automated takedown requests, legal documentation preparation and stakeholder communication workflows while also advising counter-narratives informed by behavioral psychology rather than factual rebuttal alone. Its reach extends into emerging channels where enterprises are increasingly evaluated, including large language model outputs that can be influenced by persistent misinformation. The technology is built to operate across languages and platforms at scale, addressing cost constraints through optimized model orchestration that limits false positives without prohibitive processing expense.
This combination of narrative comprehension, early warning and integrated mitigation reflects a security mindset applied to an environment that has historically been treated as peripheral. It recognizes that once harmful narratives reach mass adoption, control diminishes sharply. Preventing escalation depends on speed, contextual understanding and disciplined response, qualities familiar to cybersecurity teams but newly applied to public discourse risk.
For organizations seeking a credible standard in narrative intelligence, Brinker represents a compelling choice. Its focus on intent-driven analysis, cross-platform visibility and actionable mitigation aligns with how modern cyber risk now manifests outside the firewall. For executives tasked with protecting trust, continuity and stability, it offers a structured way to bring narrative risk into the core security program rather than leaving it to chance or fragmented ownership. ...Read more
Wireless access tests in penetration testing evaluate the security of an organization's wireless network infrastructure by uncovering vulnerabilities that attackers could exploit to gain unauthorized access. Due to their broadcast nature and easy accessibility, wireless networks are often the first target for external threats. These tests are vital in ensuring network security and preventing potential breaches.
Why Wireless Access Testing Is Important?
Detecting Rogue Access Points
Unauthorized access points, often set up without proper authorization, pose a severe security risk. Attackers exploit these rogue points to gain unauthorized access to the network, potentially bypassing security controls. Detecting and removing rogue access points is critical to maintaining network integrity. Through wireless access testing, regular scans and monitoring help identify and neutralize these threats early, providing actionable insights into how attackers may attempt to breach network defenses.
Securing Wireless Communication
Wireless access tests evaluate the strength of encryption and authentication protocols to ensure robust security. Weak encryption standards, such as WEP, or misconfigured WPA/WPA2 protocols can leave networks vulnerable. Organizations can mitigate the risk of unauthorized access by assessing encryption strength and ensuring newer, more secure protocols like WPA3. Penetration testing also verifies that wireless data transmissions remain confidential and secure against potential interception or tampering.
Protecting Against Man-in-the-Middle Attacks
Man-in-the-middle (MITM) attacks involve an attacker intercepting and possibly altering communications between two parties. Wireless access testing focuses on identifying vulnerabilities like rogue access points and evil twin attacks, where attackers create fake networks to intercept user data. These tests help organizations sensitive data by ensuring that users only connect to legitimate access points, mitigating the risk of interception and theft.
Identifying Weak Authentication Mechanisms
Penetration testing exposes weak or misconfigured authentication setups, such as using outdated protocols like WEP or weak pre-shared keys (PSKs). Attackers exploit vulnerabilities through brute-force or dictionary attacks. Organizations enhance defenses by identifying vulnerabilities and safeguarding the network against threats with easy access to wireless networks.
Preventing Data Interception
Wireless access tests examine the risk of data interception by testing encryption strength and ensuring that sensitive communications are secured. Attackers can exploit unsecured or poorly encrypted networks to capture transmitted data. Penetration testing helps organic organizations ensure that controls are in place and functioning as intended, preventing attackers from intercepting and reading confidential information during transit.
Assessing Network Resilience Against Denial of Service (DoS) Attacks
DoS attacks commonly disrupt wireless networks by overwhelming them with excessive traffic or sending de-authentication requests to disconnect legitimate users. Wireless access tests evaluate the network's ability to withstand such attacks, ensuring service availability even under malicious conditions. Penetration testing helps identify weak points in network defenses, allowing organizations to take countermeasures that maintain stability and availability during an attack.
Organizations measure to strengthen their defenses by identifying potential vulnerabilities and ensuring the network is protected against real-world threats. The findings from wireless access tests enhance the overall effectiveness of penetration testing, delivering critical insights into how attackers could exploit weaknesses in the wireless infrastructure. ...Read more
