Is Your Company Ready to Face Tomorrow’s Security Risks?
In 2017, businesses faced relentless waves of ransomware, phishing, and IoT attacks. As the cyber landscape evolves, understanding tomorrow’s security risks is crucial for survival. Industry experts from Comarch ICT—Malgorzata Zabieglinska-Lupa, Paulina Swiatek, and Maciej Rosolek—recently shared their insights on emerging threats and how organizations can fortify their defenses.
Why Security Feels Like a Never-Ending Chase
Security is one of the fastest-growing sectors in IT, yet it often lags behind attackers. Maciej Rosolek compares this to a dam holding back a river: we build protections based on best practices, but water (malicious actors) erodes them over time. As technology advances, hackers gain access to powerful tools, creating new leaks that demand immediate fixes. This cycle explains why security is a constant catch-up game.
Paulina Swiatek adds that hackers learn faster than most IT professionals. To anticipate attacks, businesses must invest in employee training and infrastructure. Without these, the success of a cyberattack often depends on how much time and money an organization is willing to spend on defense.
Shifting Attitudes: From Cost to Strategic Priority
Historically, security was viewed as an unnecessary expense. However, high-profile incidents—like ransomware hitting UK hospitals or the Edward Snowden leaks—have changed perceptions. More companies now realize that a breach can cost far more than preventive measures. Yet, many still treat IT security as separate from business strategy, leading to expensive and misaligned solutions.
Swiatek stresses that IT security strategy should be built alongside business strategy. When aligned, security becomes more effective and cost-efficient. Companies that fail to integrate these elements risk leaving themselves exposed to tomorrow’s security risks.
Key Trends Shaping the Future of IT Security
Machine Learning: The New Frontier
With over 100,000 new malware variants created daily, traditional antivirus software is no longer enough. Maciej Rosolek highlights the need for intelligent systems that use machine learning to detect threats. These include:
- SIEM tools that correlate data from multiple sources to identify suspicious behavior
- IPS/IDS systems with adaptive learning capabilities
- Flow analysis platforms that spot anomalies in network traffic
Machine learning is set to become a cornerstone of modern security, helping organizations stay ahead of tomorrow’s security risks.
GDPR Compliance: A Catalyst for Change
The EU General Data Protection Regulation (GDPR), enforced in May 2018, forced many companies to overhaul their data protection practices. Non-compliance carries severe penalties, pushing businesses to invest in better security. However, Rosolek notes that many firms lack internal expertise, turning to specialized IT integrators and service providers for support. This trend is driving a surge in security spending.
To prepare for GDPR, companies must:
- Read and understand the regulation thoroughly
- Map where personal data is stored and who has access
- Conduct risk assessments and implement tailored protections
There is no one-size-fits-all solution; each organization must find the right mix of tools and processes to safeguard data.
Building a Successful IT Security Strategy
Developing a robust strategy requires a holistic approach. Swiatek recommends starting with the company’s business goals and then assessing the current security posture. This involves understanding processes, functions, and future plans. From there, organizations can define the desired security state and outline steps to achieve it.
Key elements include:
- Alignment with business and IT strategies
- Regular threat and risk analysis
- Compliance with standards and regulations
Because threats evolve, security strategies must be reviewed and updated continuously. Measuring effectiveness and making improvements is essential to stay resilient.
Empowering the Weakest Link: End Users
Both experts agree that end users are the most vulnerable point in any security system. Even the most advanced tools fail if employees lack awareness. Swiatek suggests assuming a low baseline of knowledge and providing regular training with mandatory exams. Topics should include password policies, data access rules, and social engineering tactics.
Rosolek emphasizes ongoing awareness campaigns, such as security events where employees see real-world examples of data theft. Annual refresher tests and new-hire training help reinforce good habits. By investing in user education, companies can significantly reduce their exposure to tomorrow’s security risks.
For more insights on IT risk and security management, check out Comarch ICT’s IT Risk & Security page. Also, explore our guide on cyber threat trends and employee security training best practices.
