JUNE 2021CIOAPPLICATIONSEUROPE.COM9rise of ransomware threats against organisations such as Cognizant, Travelex, Toyota, Garmin, LG Electronics, Xerox, etc.In these cases, organisations are hit by a cyber threat that spreads, renders IT capabilities inoperable and significantly disrupts a business' capability to function.Although there are numerous reasons as to why the threat is able to yield this capability, the inability for an organisation to pivot digital operations to another site, cloud vendor or correctly deploy/leverage disaster recovery mechanisms, speaks to the idea that rigid design thinking regarding digital, cripples companies resilience and demonstrates poor planning and ill prepared understanding of the modern business operating environment.Adding further context: Your CISO is no doubt advocating traditional defence-in-depth strategies, that require heavy financial investment in areas such as a security operations centre, end-point detection capabilities, hunt teams, threat intelligence feeds, anti-malware software, DLP capabilities, etc.It will be but a few that will be advocating an agile mindset, complimented with resilient processes that plan for a defensible strategy of adaptation and ability to pivot.The existing traditional strategies, despite a recognition to move away from the Castle-and-Moat analogy, still adhere and enforce rigid structural elements in terms of process and operationalisation, even in the case of the Zero-trust model, where the `trust, but verify' adage is espoused. These models fail to significantly leverage an adaptive outlook where fail-over, non-homogenous redundancy and resilience are key. It's not only about defence-in-depth, but also, resilience-at-scale.Enterprise Agility in the Face of Rising Cyber ThreatsIt is here, that the evolving agile software development paradigm can come to businesses aid, in show- casing methods of work that have analogic synergies to business operations e.g. the rise of container- based software artifacts: Operationally self-contained units that are adaptable and can be automatically deployed, managed and linked to CI/CD workflows, etc.If business units can take on the same dynamic behaviour of being self-contained, adaptable, and transferable while offering resilience, organisations will be in a much better place to react to the global marketplace and threat landscape.Concerns:Having stated the above, many reading this will probably consider it a restatement of the old organisational discussion as to whether to centralise or decentralise, and at a high level you'd be correct however, the salient difference is how processes and a complimentary agile mindset are applied.The advocated shift of focus will not be easy to embrace and will be even harder to implement within the context of an Enterprise organisation, however the journey must be started and can be initiated with a mind-set change.As a leader, one needs to start asking the correct questions about resilience, adaptability, and contingency.As soon as these questions start to be asked at the top level, this will trigger an approach that will be distilled, down-stream through the organisation.Traditional metrics like completion time, financial outlay, rigid project planning, ROI etc. require complimentary inquires that reveal the agile dimension.
< Page 8 | Page 10 >