Cyber IT Supervisory Forum eBook

Internal Use Only

AI and Cybersecurity: What Should You Do?

 AI will likely be embedded in every major cyber product/service ‒ Learn to ask good Qs! [7] ‒ Consider using ATLAS

 Cyber workforce mix may shift towards data analysis, AI expertise ‒ Hiring good people may get even harder!  AI will help, but don’t fire your analysts! ‒ According to Microsoft: “People are still vitally important to cybersecurity. AI increases their skills and ability to identify and resolve threats faster.”

More smoke than heat right now, but shouldn’t be ignored as risks are ramping up

 Good security practices, defense-in-depth, and resiliency practices will remain as important as ever

11

© 2024 THE MITRE CORPORATION. ALL RIGHTS RESERVED. APPROVED FOR PUBLIC RELEASE. DISTRIBUTION UNLIMITED 23-01698-01.

Internal Use Only

Ransomware is Still a Major Risk

 Increasingly sophisticated approaches (TTPs) ‒ Attacks on back-up systems  Ransomware-as-a-Service abets criminals in a major way  Enterprise-level financial impacts can be significant  Data loss/theft is a real possibility  Regulatory and reputational impacts are a major concern

12

© 2024 THE MITRE CORPORATION. ALL RIGHTS RESERVED. APPROVED FOR PUBLIC RELEASE. DISTRIBUTION UNLIMITED 23-01698-01.