Innovating your way to better cybersecurity

Issue 1 2022 Information Security

It is estimated that the largest 1000 companies in the world spend US$782 billion[1] on research and development (R&D) – an indication of its importance in the global marketplace.


Edison Mazibuko.

Research from Stanford University highlights the growing cost pressure involved in R&D, with productivity declining by a factor of 41 since the 1930s, working out at around 5% per year. The university translates this into organisations needing to spend considerably more to achieve the same outputs.

Despite the cost implications jumping off the carousel has even worse consequences. Studies from the London School of Economics[2] shows that firms who achieve at least one new product launch per year boost their revenue productivity an estimated 17%, with each new launch adding an extra 22% to their productivity rating. What’s more, the University of Houston found that investing in one’s innovation capacity had a significant impact on both the profitability of firms and their share price – that fact should garner the interest of all business leaders.

Each year, consulting firm PwC conducts an Annual Global CEO Survey[3] with the purpose of understanding which hot-button issues are on the minds of today’s global business leaders. It is reported that over the years, innovation has remained at the forefront of their concerns. This is understandable in light of the number of companies that have entered the market with new disruptive technologies set to upset the apple carts of established businesses, industries and even countries. Media reports abound with stories of agile start-ups upending venerable institutions who failed to remain on the cutting edge of innovation. Innovation wars can leave many companies in their wake.

Part of the problem is that innovation is such a catch-all term that it makes it very difficult to pin down precisely what it means. The reality is that the term can be applied to everything from business models to new processes.

What has innovation got to do with cybersecurity?

The answer to that is – everything. Just look at the innovation applied by criminals on an annual basis, constantly inventing different ways to gain access to your valuable data and ransom it back to you. They constantly reinvent themselves, their technologies, attack methods – why would you think that if you stand still, you can deal with this incredible rate of innovation?

Deloitte[4] notes that definitions of cybersecurity conjure up ideas of technology and IT, particularly centred around the confidentiality, integrity and availability of data. However, as the pace of digital transformation accelerates, cyber risks will continue to manifest through business operations, product launches and other areas of enterprise. They go on to note that as a result, the definition of cybersecurity in the modern world is increasingly diverse and responsive to new and emerging threats.

These threats can manifest from rapid technological innovation if an holistic view of cyber risk is not included in the innovation process. Basically, what that is saying is that as we innovate and produce incredible new technologies that change our lives and businesses, we also need to look at them critically and assess what risks they bring to the business and how these can be mitigated.

As the 4th industrial revolution gains pace with 5G rollouts and more, business leaders and innovators seek to rapidly mobilise new technologies within the transformation process, with the challenge being rapid rollout with mitigated risk. This goal developed into an urgent imperative as the need to operate remotely hit world businesses in the wake of the pandemic.

Cybersecurity policies and strategies need to be designed to support and now halt or slow, the progress of innovation. New technologies and innovations which understand the importance of cybersecurity are better equipped for long-term success and customer trust.

Deloitte confirms that factoring in cyber risks from the outset often leads to more successful outcomes and lower cost when compared with any post implementation fix or bolt-on. They go on to emphasise that cybersecurity augmented by innovation, can propel us forward to an exciting and digitally-enabled world. I would agree with that statement and with one they also put forward and that by being cyber savvy, you can be confident in taking full advantage of every technological opportunity.

The downside is that without business leader education and awareness programmes on this topic, in conjunction with the mitigation of security risk at a company level, companies miss the opportunity to position themselves for sustainable future transformation through innovation.

In Mazibuko’s second article on the topic of innovation and cybersecurity, he will outline how the combination of these two powerful factors can act as business enablers.

[1] https://ideadrop.co/innovation-management/different-types-of-innovation/

[2] https://cep.lse.ac.uk/pubs/download/dp1607.pdf

[3] https://www.pwc.com/ceosurvey

[4] https://www2.deloitte.com/au/en/blog/innovation-blog/2020/what-cybersecurity-do-with-innovation.html




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Highest increase in global cyberattacks in two years
Information Security News & Events
Check Point Global Research released new data on Q2 2024 cyber-attack trends, noting a 30% global increase in Q2 2024, with Africa experiencing the highest average weekly per organisation.

Read more...
There is a SaaS for everything, but at what cost, especially to SMEs?
Editor's Choice Information Security Security Services & Risk Management
Relying on SaaS platforms presents significant cybersecurity risks as the number of providers in your landscape increases, expanding your attack surface. It is important to assess the strength of the SaaS providers in your chain.

Read more...
Addressing today’s mining challenges: cyber risks beyond IT
Editor's Choice Information Security Mining (Industry)
Despite the mining industry’s operational technology systems being vulnerable to cyberattacks, many decision-makers still see these threats as purely an IT issue, even though a breach could potentially disrupt mining operations.

Read more...
Get proactive with cybersecurity
Information Security
The ability to respond effectively to a cybersecurity breach is critical, but the missing piece of the puzzle is a thorough, proactive evaluation to ascertain weaknesses and identify any hidden threats.

Read more...
How to effectively share household devices
Smart Home Automation Information Security
Sharing electronic devices within a household is unavoidable. South African teens spend over eight hours per day online, making device sharing among family members commonplace. Fortunately, there are methods to guarantee safe usage for everyone.

Read more...
How to securely manage your digital footprint
Information Security Training & Education
Managing your online presence is critical to safeguarding your privacy and security. It is imperative to take a proactive approach, including using robust cybersecurity best practices.

Read more...
The state of code security in 2024
Information Security
The 2024 State of Code Security survey reveals that organisations have continued to shore up application security defences over the last year, according to OpenText Premier Partner iOCO Application Management.

Read more...
What is the level of safety and integrity of the software supply chain?
Information Security IoT & Automation
Organisations are embracing AppSec practices and focusing on their software security posture. However, they highlight that insufficient funding and security resources, plus a disconnect between developers and security teams, remain major roadblocks.

Read more...
Cybercriminals target financial service providers to get at sensitive client data
Information Security
According to Ryan van de Coolwijk, Product Head for cyber at iTOO Special Risks, hackers target financial service providers because they hold sensitive client information that unauthorised individuals could use for fraudulent activities.

Read more...
Fortinet establishes new point-of-presence in South Africa
News & Events Information Security
Fortinet has announced the launch of a new dedicated point-of-presence (POP) in Isando, Johannesburg, to expand the reach and availability of Fortinet Unified SASE for customers across South Africa and southern African countries.

Read more...