2023年安全與風險新興技術和趨勢

Gartner

Webinars

Gartnerdeliversactionable,objective

insight,guidanceandtoolstoenable

strongerperformanceonyour

organization'smissioncriticalpriorities

Gartner

Enhanceyourwebinarexperience

E]

AskaDownloadWatch

QuestionAttachmentsAgain

RESTRICTEDDISTRIBUTION

2?2023Gartner,Inc.and/oritsaffiliates.Allrightsreserved.Gartner

筋GConnectwithGartner

TheGartnerEmerging

TechnologiesandTrends

Security&Riskfor2023

LawrencePingree

ManagingVicePresident

RESTRICTEDDISTRIBUTION

3?2023Gartner,Inc.and/oritsaffiliates.Allrightsreserved.Gartner

SecurityMegatrendsfor2023

ShiftUp

DynamicMeshedExternalizedControl

ShiftLeftShiftIn

DynamicEnvironmentswithEmbeddedandComposableSecurity

DevOps-LeadDefenseControls

GoDeep

BigData,MLEnabledCross-ControlAnalysis

andDetection

PUBLIC

4?2022Gartner,Inc.and/oritsaffiliates.Allrightsreserved.Gartner

KeyIssues

1.WhataretheKeyTrendsDrivingInnovationinSecurity?

2.WhataretheKeyEmergingTechnologiesinSecurity?

5?2021Gartner,Inc.and/oritsaffiliates.Allrightsreserved.GartnerisaregisteredtrademarkofGartner,Inc.anditsaffiliates.Gartner

Whatarethekeytrendsdriving

InnovationinSecurity?

6?2021Gartner,Inc.and/oritsaffiliates.Allrightsreserved.GartnerisaregisteredtrademarkofGartner,Inc.anditsaffiliates.Gartner

2023KeyTrendsinSecurity

SupplyChainandGeopoliticalRiskWillEmergingArchitecturalPatterns

DominMaSecurityWilStrMmfirwSecurity

?Activelymitigatehardwareandsoftware?RantoimplementsecurityproductsfocusingZeroTrust&

SupplyChainsupplychainsecuritychallengesonCSMApcmc^les

?Rearchitectyoursecuritytoberesponsive?UsezerotrustarchitecturetoenhanceCybersecurityMesh

togeopoliticairisksoverallsecurityposture

?Simplffythroughconsolidationandconvergence

DevSecOpsWillBecomeBusiness-CriticalSecOpsWVthAutomationWillEnhance

Caf?blHtles

?DevdopaDevSocOpsmindsetto

?Usevendorvalidateddetectionstacks

improveAPIandapplicationsecurity11?Treatmobilesecurityasacriticdelementofyour

fberseourltyrrmharctitlectfuorre：cOoLsPt-?edffaertcatkravsepdrewteencltloionn；ofthreats

?Enforcesecurityandtransparencyenterpriseattacksurface

DevOps?EvaluateyourautomationstrategyforSecOps

acfOBssoftwaredeliveryinfrastruclute11

increasingsecurityoperationsefhciericy

?Continuouslymonitotarxienfofcesecurity

?Enrichassetriskdata,andweaponize

onappl?cdi?onworkloads?Addressworkloadandcontrolplanesecurity

metricstooptimize?xpotur^management

inthedoudwithCNAPP

EndpointsWINNeedAdaptableProtection

DaU-CwrtricSecimtyWillBeKayto,

MDataEverywhere*'WorldAgainttThreats

?Usediscovery,classificationandDLPforvisibility?Implementpreventiveanddetectivecontrols,

intodarkdataandprotectionfrombreach/misuseimludmgransomwareprotection,onallhostsEndpoint

DataSecurity?UseEDRMtoprotectdatabeyondthe

corporateboundary

?Protectyourdistributedanalyticspipelines

CNAFP?cloud2SappliesDohprotectionpiatfornx,-CSMA-p

CDRM?<intarprlMdigkUrirightimanagemant

SouterGartrw

775183CH

INTERNALorRESTRICTED

7?2022Gartner,Inc.and/oritsaffiliates.Allrightsreserved.GartnerGartner

CybersecurityMeshDrivesContinuedFederation

CybersecurityMeshArchitecture

ShiftingLeft(DynamicEnvironments)

DashboardsProtectionIdentityFabric

DyvwniicCootra

zWAf

Centralized

ThreatIntellkgence口④字Withtheincreaseinremoteworkingand

至PolicyAppbcatkxw

ManagementRthemigrationofapplicationsanddatato

CentralizedUim

Dashboardcloudservices,theperimeterisgone.

緲代6

直昌亡IBiometrics

Cervtr?hz?dData

AlectingDigitalassets,andindividuals,are

Q小

Roiicy臼

Emailincreasinglylocatedoutsideenterprises,

OrchMtration□a

Q

Eowhichisforcingorganizationstorethink

Centralized

InvestigationSmver/VM/theirapproachtosecuritycontrols.

CoAlatnet?令畬

Location

Traditionalsecuritycontrolsarehardto

.B?

Playbooi口

Men?ge?nenladapttothisnewreality,soanew

京網■''"

Posture

Managevneotarchitecturalmodelforsecurityis

DirsclorySOTVICM

nflnneeded.

Adaplrv*Acc^M

Centralized

RopoftmgStrategyofintegratingcomposable,

Entitionwnt*

MonaoenwNMdistributedsecuritytoolsbycentralizing

thedataandcontrolplanetoachieve

moreeffectivecollaborationbetween

Gartner

PUBLICt00ls

8?2022Gartner,Inc.and/oritsaffiliates.Allrightsreserved.Gartner

NetworkDefenseArchitecture-SASE

ShiftingUp(DynamicConnectivity)SASEArchitectureComponents

?SASEcorecapabilitiesdistributed

acrossconventionalareassuchas

network,applicationanddatasecurity.

ThekeyarchitecturalprinciplesSASE:

?Unifynetworkandsecurity

orchestration.

?Minimizethenumberoforchestration

points.

IlBmoteUMTXX

?Focusonusingcloud-basedsecurityBranchSecurity

mechanisms.

Gartner

PUBLIC

9?2022Gartner,Inc.and/oritsaffiliates.Allrightsreserved.Gartner

EmbeddedDefense-SaaSSecurityPosture

ShiftingIn(EmbeddedSecurity)

Microsoft365SecurityOptions

.

Manegemarw

AcKanced

**SPMToolsEmergetoAssessSaaSCom，，

EOF

Security(schange

SecurityPostureDMARC/DiOMrSPFCUttOOMf

ThroatProtMXioo(TTvMtExpiorarTracfcAr.locttoiSiryveforSuWWM

SharePoint

AdvMcsedOXBCkiwfi}locppAuditL09

tmrKv

MkcnwoftMenderfor(Xhc*3419SwchOmOHw

?MostEarlyEmergingToolsfocuson(3.UnU.SflfeAfUclwrtwit.Anit-PZ3Ad.MF)Yammer

Flow

MICTOMWI

largecollaborationSuitesandDataSecurMyft

MK?8訪mk?E?tionAotpionJMRce(ndpotnt

CompAanc*

A|?-AqiomMH0M>M?UQW

Sharingtools(MS365,GoogleXaLOM*wn<G)正notJg<rOneDnw.(tntio*?AAireAD

.Team，Endpo4a.MPFlkiSCMKMMMCAglSyitamintun?

Workspace,Salesforce)tnfonnMiorGcMimano*(ArchivmoThirdParty.AutomsucC4ntar>

<(rt?e?fiocandLMwImo.8M*tinecltwMsit>9?

?ManyextendingShadowITvisibilityOomp*?fic?Oo?npiianc4Man*o?r(Compmnc*Sccro)

Comnu*4HtMtCompBancw(SupmvttfankWHMMRbtMgmt

usingintegrationwithOkta/Ping,etcMBnaoeme**1

?「）】，＜1.耐

?SaaSSecurityPostureNeedsAPI

Standardization

^

—i

3mOmN*l□[jEndporu

-M1c

tu0

?CISA-SecureCloudBusinessan8!￡d

Applications(SCuBA)TechnicalAIK*Informattom

□Prot?ct?on-hl.0306Otont

ReferenceArchitecture(TRA)

-Gartner

PUBLIC

10?2022Gartner,Inc.and/oritsaffiliates.Allrightsreserved.Gartner

PostureManagementExpandingScopeandVisibility

ShiftingIn(*SPM+CloudSecurity)IllustrationofPotentialDeploymentPatternsforCASB,CSPM.CWPP.

SSPMandSMP

儆后

CnterpriM

CloudSecurityPostureCategories(Current)ComplUrM：，Ai-inwit|

QMTS

alk)f14lMortitorhCompluincAaaessment

DgvSccOp*Infgratlon

Cloud/OnProxyAcUptiwAccess

?ASPM-AppSecurityPostureManagementAPI

RHfcIdfHlTtcMIonOContrci

lnt?grat>on

PolicyEorctnyatoCloud

DataLotsPrevention

?CSPM-CloudSecurityPostureManagementTtweetProtection

?CASB-CloudAccessSecurityBroker

CIPSWorkloi

?CWPP-CloudWorkloadProtectionPlatforms

?KSPM-KubernetesSecurityPostureManagement

A-Gc

eaUUyo?ou

>rUVuCw

?SMP-SaaSManagementPlatformo5UIOdGqo

x2o-ZOM?lmW=sSds

wNCpACsAKy

5UAe-e-SEo

iss5dsuOuOS

eoOhoM2?UJf

mSMsoM

?SSPM-SaaSSecurityPostureManagementsP