Craig Burland is a Chief Information Security Officer with Inversion6.
Our digital collective stands at a critical crossroads. Petty cybercrime, major breaches and ransomware events have become daily news—no more surprising than a tourist being pickpocketed in Amsterdam or Barcelona. But the narrative of our cybersecurity journey is not about being unlucky, “in the wrong place at the wrong time,” or ill-fated; it’s written by our proactive actions and unwavering commitment to fundamental practices. The choices we make today define our resilience against cyber threats tomorrow.
In one of my favorite cartoon movies, Kung Fu Panda, the protagonist panda, Po, wisely quips at the peak of his character arc, “There is no secret ingredient. It’s just you.” Po distills the essence of what’s needed today in cybersecurity. The magic lies not in elusive, sophisticated solutions but in consistently applying the basics: patching vulnerabilities, updating software and fostering a security-first mindset. By embracing these practices, we hold the power to thwart even the most insidious threats, such as ransomware and account compromises.
The Imperative Of Patching
One of the most effective defenses against cyber threats is regular patching. Cyber adversaries thrive on exploiting outdated systems and unpatched software. Despite this well-known fact, many organizations continue to delay essential updates, prioritizing operational continuity over security and ignoring the lessons of poor lifecycle management. This short-term thinking can lead to long-term consequences, making our systems vulnerable to attacks that could have been easily prevented. Patching requires commitment, discipline and ongoing investment of resources—relatively simple things measured against the bar of inventing new products, breaking into new markets, or transforming an organization.
The Ransomware Menace
The rising trends in ransomware and extortion are a stark reminder of the critical need for robust cybersecurity measures. The number of attacks increased by 73% in 2023, according to a SANS blog from January 2024 (Ransomware Cases Increased Greatly in 2023 | SANS). Payments nearly doubled, Sophos reported. Attackers shifted to double and triple extortion. Ransomware-as-a-Service lowered the barrier to entry, fueling these negative trends. These events can put an organization at a standstill, causing significant financial and reputation damage. Most ransomware attacks exploit known vulnerabilities and phishing attempts—threats that can be mitigated through diligent patching and employee awareness training.
The Cost Of Complacency
The cost of neglecting cybersecurity is steep. Continually deprioritizing security measures exposes our organization to breaches, data loss and operational disruptions. The financial toll is substantial, but the erosion of trust from our stakeholders can be even more damaging. Our clients, partners and employees expect us to safeguard their information with the utmost care and diligence.
Our Path Forward
To control our fate in the cybersecurity domain, we must embrace a culture of vigilance and responsibility. This begins with leadership. As executives, our role is to champion cybersecurity initiatives and ensure that they receive the attention and resources they deserve. We must hold ourselves accountable to operating securely by adopting goals that measure not just the capabilities we’ve built but the risks we’ve reduced. Additionally, investing in regular training programs, maintaining up-to-date systems and fostering open communication about potential threats are crucial steps in this journey. By integrating security into our strategic priorities, we signal its importance to the entire organization.
Conclusion
Children’s movies are often cliché, frequently funny and occasionally embedded with wisdom that belies the medium. In this case, the hero’s simple statement contains a fundamental truth. In the realm of cybersecurity, we are the architects of our destiny. We have the tools to reverse these trends but choose not to use them. By committing to fundamental practices and maintaining a proactive stance, we can shield our organization and stakeholders from the myriad threats that lurk in the digital shadows. As we navigate this path, let us remember that there is no secret ingredient to our success—it’s just us, our dedication and our unwavering resolve.
Forbes Technology Council is an invitation-only community for world-class CIOs, CTOs and technology executives. Do I qualify?
