Problem
Need help with around 150 words comment about the discussion below: My thoughts on what the future holds for threats is Ransomware attack and attacks against key infrastructure. These attacks will increase in complexity and occurrence as I feel that warfare will first take place in the cyber realm. As ransomware attacks are a huge business for hackers and with higher end computing power it allows for the encryption to be done at a higher speed. When it comes to infrastructure attacks they will increase as competition and tension rises with other nation states, leading to major outages affecting the nation as a whole.
The only technologies that can help with the threats are SEIMs (Security Event Incident Management) which are not new but have started to utilize AI technology to start creating more automation. Ransomware can really be restored by good back-ups that can be used to bring the network back to a normal state quickly and cannot be accessed/corrupted. When it comes to attacks against the infrastructure, it comes down to looking for what can be utilized against it and monitoring it constantly. Not everything can be prevented by software and requires some level of human interaction to prevent attacks and noticing trends that are abnormal on a network.
GRC can help with these matters by installing the tools needed for threat analysts and teaching members how to use them as well as what to look for. It will be the responsibility to create a SOC (Security Operations Center) that will monitor traffic and alert/respond to any incidents.