In today’s rapidly evolving digital landscape, security leaders are facing unprecedented challenges when it comes to protecting their organizations from cyber threats. The traditional zero tolerance for failure approach to cybersecurity is no longer sufficient in the face of growing threats. It’s time to embrace augmented cybersecurity to not just survive, but thrive in this new era.

At the recent Gartner Risk and Security Summit, analysts emphasized the importance of shifting focus towards response and recovery capabilities, rather than just prevention. While prevention is still crucial, it’s not enough to combat the ever-expanding threat landscape.

Christopher Mixter, VP Analyst at Gartner, highlighted the need for organizations to invest more in response and recovery capabilities, as this is where the biggest maturity gap lies. He emphasized that unrealistic expectations of never failing have put immense pressure on security teams, leading to collective under-investment in these crucial areas.

Akif Khan, VP Analyst at Gartner, stressed the inevitability of cyber-attacks and the need to discard the zero tolerance for failure mindset. Instead, he recommended elevating response and recovery to equal status with prevention for a more resilient security posture.

AI and Third-Party Risk

With the rise of technologies like GenAI, organizations must focus on adapting and responding to cyber threats effectively. Gartner predicts a 15% increase in spending on securing Gen AI tools, highlighting the importance of managing AI security within organizations.

Gartner also emphasized the significance of addressing third-party risks from vendors and recommended having a formal contingency plan in place. A strong third-party cyber risk management plan can lead to a 43% improvement in effectiveness.

Gartner’s Minimum Effective Toolset

Gartner introduced the concept of a minimum effective toolset in 2023 and reiterated its importance at the 2024 conference. This approach urges leaders to streamline their cybersecurity tools to the smallest number necessary for observing, defending, and responding to threats.

While consolidating tools is recommended, Gartner advised against relying on a single vendor for all cybersecurity needs, as innovation in the market provides opportunities for enhanced security.

Resilient Cybersecurity Workforce

A resilient cybersecurity workforce is essential for effectively combating cyber threats. Khan emphasized the need to make experimentation and failure safe, moving away from a culture of hero behavior where success is defined by incident-free operations.

Gartner highlighted the importance of self-care and resiliency as competencies that should be integrated into workflows to prevent burnout and promote a healthy cybersecurity culture.