2023年安全与风险新兴技术和趋势

Gartner

Webinars

Gartnerdeliversactionable,objective

insight,guidanceandtoolstoenable

strongerperformanceonyour

organization'smissioncriticalpriorities

Gartner

Enhanceyourwebinarexperience

E]

AskaDownloadWatch

QuestionAttachmentsAgain

RESTRICTEDDISTRIBUTION

2©2023Gartner,Inc.and/oritsaffiliates.Allrightsreserved.Gartner

筋GConnectwithGartner

TheGartnerEmerging

TechnologiesandTrends

Security&Riskfor2023

LawrencePingree

ManagingVicePresident

RESTRICTEDDISTRIBUTION

3©2023Gartner,Inc.and/oritsaffiliates.Allrightsreserved.Gartner

SecurityMegatrendsfor2023

ShiftUp

DynamicMeshedExternalizedControl

ShiftLeftShiftIn

DynamicEnvironmentswithEmbeddedandComposableSecurity

DevOps-LeadDefenseControls

GoDeep

BigData,MLEnabledCross-ControlAnalysis

andDetection

PUBLIC

4©2022Gartner,Inc.and/oritsaffiliates.Allrightsreserved.Gartner

KeyIssues

1.WhataretheKeyTrendsDrivingInnovationinSecurity?

2.WhataretheKeyEmergingTechnologiesinSecurity?

5©2021Gartner,Inc.and/oritsaffiliates.Allrightsreserved.GartnerisaregisteredtrademarkofGartner,Inc.anditsaffiliates.Gartner

Whatarethekeytrendsdriving

InnovationinSecurity?

6©2021Gartner,Inc.and/oritsaffiliates.Allrightsreserved.GartnerisaregisteredtrademarkofGartner,Inc.anditsaffiliates.Gartner

2023KeyTrendsinSecurity

SupplyChainandGeopoliticalRiskWillEmergingArchitecturalPatterns

DominMaSecurityWilStrMmfirwSecurity

•Activelymitigatehardwareandsoftware•RantoimplementsecurityproductsfocusingZeroTrust&

SupplyChainsupplychainsecuritychallengesonCSMApcmc^les

•Rearchitectyoursecuritytoberesponsive•UsezerotrustarchitecturetoenhanceCybersecurityMesh

togeopoliticairisksoverallsecurityposture

•Simplffythroughconsolidationandconvergence

DevSecOpsWillBecomeBusiness-CriticalSecOpsWVthAutomationWillEnhance

Caf»blHtles

•DevdopaDevSocOpsmindsetto

•Usevendorvalidateddetectionstacks

improveAPIandapplicationsecurity11•Treatmobilesecurityasacriticdelementofyour

fberseourltyrrmharctitlectfuorre：cOoLsPt-»edffaertcatkravsepdrewteencltloionn；ofthreats

•Enforcesecurityandtransparencyenterpriseattacksurface

DevOps•EvaluateyourautomationstrategyforSecOps

acfOBssoftwaredeliveryinfrastruclute11

increasingsecurityoperationsefhciericy

•Continuouslymonitotarxienfofcesecurity

•Enrichassetriskdata,andweaponize

onappl»cdi»onworkloads•Addressworkloadandcontrolplanesecurity

metricstooptimize•xpotur^management

inthedoudwithCNAPP

EndpointsWINNeedAdaptableProtection

DaU-CwrtricSecimtyWillBeKayto,

MDataEverywhere*'WorldAgainttThreats

•Usediscovery,classificationandDLPforvisibility•Implementpreventiveanddetectivecontrols,

intodarkdataandprotectionfrombreach/misuseimludmgransomwareprotection,onallhostsEndpoint

DataSecurity•UseEDRMtoprotectdatabeyondthe

corporateboundary

•Protectyourdistributedanalyticspipelines

CNAFP•cloud2SappliesDohprotectionpiatfornx,-CSMA-p

CDRM•<intarprlMdigkUrirightimanagemant

SouterGartrw

775183CH

INTERNALorRESTRICTED

7©2022Gartner,Inc.and/oritsaffiliates.Allrightsreserved.GartnerGartner

CybersecurityMeshDrivesContinuedFederation

CybersecurityMeshArchitecture

ShiftingLeft(DynamicEnvironments)

DashboardsProtectionIdentityFabric

DyvwniicCootra

zWAf

Centralized

ThreatIntellkgence口④字Withtheincreaseinremoteworkingand

至PolicyAppbcatkxw

ManagementRthemigrationofapplicationsanddatato

CentralizedUim

Dashboardcloudservices,theperimeterisgone.

缈代6

直昌亡IBiometrics

Cervtr«hz«dData

AlectingDigitalassets,andindividuals,are

Q小

Roiicy臼

Emailincreasinglylocatedoutsideenterprises,

OrchMtration□a

Q

Eowhichisforcingorganizationstorethink

Centralized

InvestigationSmver/VM/theirapproachtosecuritycontrols.

CoAlatnet❷令畲

Location

Traditionalsecuritycontrolsarehardto

.B©

Playbooi口

Men«ge«nenladapttothisnewreality,soanew

京网■''"

Posture

Managevneotarchitecturalmodelforsecurityis

DirsclorySOTVICM

nflnneeded.

Adaplrv*Acc^M

Centralized

RopoftmgStrategyofintegratingcomposable,

Entitionwnt*

MonaoenwNMdistributedsecuritytoolsbycentralizing

thedataandcontrolplanetoachieve

moreeffectivecollaborationbetween

Gartner

PUBLICt00ls

8©2022Gartner,Inc.and/oritsaffiliates.Allrightsreserved.Gartner

NetworkDefenseArchitecture-SASE

ShiftingUp(DynamicConnectivity)SASEArchitectureComponents

•SASEcorecapabilitiesdistributed

acrossconventionalareassuchas

network,applicationanddatasecurity.

ThekeyarchitecturalprinciplesSASE:

•Unifynetworkandsecurity

orchestration.

•Minimizethenumberoforchestration

points.

IlBmoteUMTXX

•Focusonusingcloud-basedsecurityBranchSecurity

mechanisms.

Gartner

PUBLIC

9©2022Gartner,Inc.and/oritsaffiliates.Allrightsreserved.Gartner

EmbeddedDefense-SaaSSecurityPosture

ShiftingIn(EmbeddedSecurity)

Microsoft365SecurityOptions

.

Manegemarw

AcKanced

**SPMToolsEmergetoAssessSaaSCom，，

EOF

Security(schange

SecurityPostureDMARC/DiOMrSPFCUttOOMf

ThroatProtMXioo(TTvMtExpiorarTracfcAr.locttoiSiryveforSuWWM

SharePoint

AdvMcsedOXBCkiwfi}locppAuditL09

tmrKv

MkcnwoftMenderfor(Xhc*3419SwchOmOHw

•MostEarlyEmergingToolsfocuson(3.UnU.SflfeAfUclwrtwit.Anit-PZ3Ad.MF)Yammer

Flow

MICTOMWI

largecollaborationSuitesandDataSecurMyft

MK»8访mk«E»tionAotpionJMRce(ndpotnt

CompAanc*

A|♦-AqiomMH0M>M«UQW

Sharingtools(MS365,GoogleXaLOM*wn<G)正notJg<rOneDnw.(tntio*•AAireAD

.Team，Endpo4a.MPFlkiSCMKMMMCAglSyitamintun»

Workspace,Salesforce)tnfonnMiorGcMimano*(ArchivmoThirdParty.AutomsucC4ntar>

<(rt«e«fiocandLMwImo.8M*tinecltwMsit>9«

•ManyextendingShadowITvisibilityOomp*«fic«Oo«npiianc4Man*o«r(Compmnc*Sccro)

Comnu*4HtMtCompBancw(SupmvttfankWHMMRbtMgmt

usingintegrationwithOkta/Ping,etcMBnaoeme**1

»「）】，＜1.耐

・SaaSSecurityPostureNeedsAPI

Standardization

^

—i

3mOmN*l□[jEndporu

-M1c

tu0

•CISA-SecureCloudBusinessan8!£d

Applications(SCuBA)TechnicalAIK*Informattom

□Prot«ct»on-hl.0306Otont

ReferenceArchitecture(TRA)

-Gartner

PUBLIC

10©2022Gartner,Inc.and/oritsaffiliates.Allrightsreserved.Gartner

PostureManagementExpandingScopeandVisibility

ShiftingIn(*SPM+CloudSecurity)IllustrationofPotentialDeploymentPatternsforCASB,CSPM.CWPP.

SSPMandSMP

儆后

CnterpriM

CloudSecurityPostureCategories(Current)ComplUrM：，Ai-inwit|

QMTS

alk)f14lMortitorhCompluincAaaessment

DgvSccOp*Infgratlon

Cloud/OnProxyAcUptiwAccess

•ASPM-AppSecurityPostureManagementAPI

RHfcIdfHlTtcMIonOContrci

lnt«grat>on

PolicyEorctnyatoCloud

DataLotsPrevention

•CSPM-CloudSecurityPostureManagementTtweetProtection

•CASB-CloudAccessSecurityBroker

CIPSWorkloi

•CWPP-CloudWorkloadProtectionPlatforms

•KSPM-KubernetesSecurityPostureManagement

A-Gc

eaUUyo?ou

>rUVuCw

•SMP-SaaSManagementPlatformo5UIOdGqo

x2o-ZOM«lmW=sSds

wNCpACsAKy

5UAe-e-SEo

iss5dsuOuOS

eoOhoM2?UJf

mSMsoM

•SSPM-SaaSSecurityPostureManagementsP