2024年确保生成式AI时代的数字核心安全-以网络安全为重塑的战略推动力研究报告

SecuringtheDigitalCoreintheGenAIEra

Cybersecurityasastrategicenablerofreinvention

SecuringtheDigitalCore2

Contents

Page3-5

Executivesummary

Page6-8

Whyreinventionputsyouatrisk

Page9-10

Issecuritykeepingup?

Page11-12

Costofcyberattacks

Page13-22

Closingthesecuritygap

Page23

Gettingstarted

>

/securing-digital-core

SecuringtheDigitalCoreExecutivesummary3

Executive

summary

Companiesareracingtobuildtheir

digitalcorestoreinventeverypartof

businesswithgenerativeAI.However,

manyarefallingbehindwhenitcomestosecuringcriticaltechnologylayersfromunauthorizedaccessorattacks.

>

/securing-digital-core

SecuringtheDigitalCoreExecutivesummary4

Securityisintegraltoadigitalcoreasitsthreesetsoftechnologies—digitalplatforms,adataandAIbackbone

andthedigitalfoundationwhere

securityresides—constantlyinteractwitheachothertopowerreinvention.

Inourrecentlypublishedresearch,

ReinventingwithaDigitalCore

,wefoundorganizationswithindustry-leading

capabilities—definedasthetopquartileinourDigitalCoreIndex—experienceda20%higherrevenuegrowthrateanda30%increaseintheirprofitability.

Evolvingtosuchanindustry-leadingstate

requiresleveragingtherightmixoftoolsandpracticesforagilityandinnovation,alongwithsecuritycapabilitiesand

resilience.Ofthatmix,securitycanmovebeyondastaticdefensemechanism.If

companiesintegratesecuritymeasuresintothefabricoftheirevolvingdigitallandscape,itcanbecomeenablerofbusinessgrowth

andtransformation.

>

That’seasiersaidthandone.Wefound,on

average,a23-pointlaginsecuritycapabilities1basedonourDigitalCoreIndexforcompaniesthathaveyettoachievean‘industry-leading’digitalcore.Theseorganizationsfallbehind

theirleadingcompetitorsinkeyareassuchassecuringdevelopment,securityand

operations(DevSecOps),implementingZero

Trustidentityandnetworkmodels,automatingsecurityconfigurations,conductingthreat

modellingandprotectingcyber-physicalandedgesystems.

AsgenerativeAIandotherdisruptive

technologiesaccelerateinnovationand

redefineindustries,theyalsoexpandthe

threatlandscape,openingmoreavenuesformaliciousactors.Intheracetoadoptthesetechnologies,companiesoftenprioritize

speedoversecurity—neglectingearly

securityintegration,whichincreasesrisksand

TheDigitalCoreIndexassessesorganizations'enterprise

technologystacksacrosseach

ofthesevenpillarsofthedigitalcore,using40subcomponentstodevelopourDigitalCoreIndex(normalizedtoascaleof100).

Capabilitypointsrepresenttherelativesophisticationofagiventechnology.Gapsrepresent

technologymodernization

activitiesneededtoachievethenextlevelofcapability.

prolongsremediationefforts.Thisreactiveapproachalsoaccumulatestechnicaldebt,leadingtocostsfargreaterthanifsecurityhadbeenembeddedfromthestart.

Today,organizationsrelyon76securitytools,onaverage,tomanagetheirsecurityposture,anumberthatisgrowing2.Forexample,the

amountofnewormodifiedconfiguration

settingsfromcloudserviceprovidersis

nowinthethousandseverymonth,with

securityteamsscramblingtokeepsystemssecureanduptodate.Suchcomplexities

oftencreateredundancy,increasetheriskof

misconfigurationsandcomplicateintegrationefforts,diminishingtheefficiencyofsecurityoutcomes.Combinedwithtalentshortages,thismeanssome4.8millioncybersecurity

jobsworldwideareunfilled—hinderingthe

effectivescalingofsecuritysolutions3.

/securing-digital-core

SecuringtheDigitalCoreExecutivesummary5

Lever03

Howcanorganizationsclosethissecurity

maturitygap?

Scaleandevolve

Lever01

Streamline

Organizationsmustconsolidatevendorsandadoptintegrated

toolswhileretiringlegacyones.Harnessingthecapabilitiesof

generativeAIcandramatically

reducethenumberofsecurity

toolsinuse.Thistechnologycanstreamlineprocesses,automate

routinetasksandenhancedecision-makingbyprovidingadvanced

insightsandthreatanalysis.

Lever02

Modernize

Securitymustmodernizeitstools

andstrategiestokeeppacewith

theevolvingdigitallandscape.Forexample,byadoptingInfrastructureasCode(IaC)withbuilt-insecurityscanningforcoderepositoriesandpipelines,securityconfigurations

Securityisacompetitivedifferentiator—it

fostersanenvironmentwheretrust,resilience

andadaptabilityareattheforefront.Thisallowsorganizationstonavigatereinventionconfidentlywhileseizingnewopportunitiesforprogressand

AutomationandCybersecurity-

as-a-Service(CSaaS)canhelp

scalesecurity.Forexample,usinggenerativeAI-drivendefense

solutionsforthreattestingsuchasautomatedredteamingandpenetrationtesting.Thesetools

areespeciallytimelyasregulationsforsuchtechnologiesarecomingdownthepike.Theyaimtoaddresssecurityrisks,discrimination

andbias,privacyconcerns,and

potentialimpactsoncareersand

labormarkets.Leadingplatform

companiesandhyperscalersare

alreadyrollingoutsecurityfeaturesbasedonthem.

competitiveadvantage.

canbestandardizedandtesting

Buildingrobustsecurityisajourney,notasprint.Organizationscanactivatethreestrategiclevers

totransformtheirsecuritytorunatthespeedandscalethebusinessneedswhiledrivingdowncostsandreducingtechnicaldebt.

seamlesslyintegratedintothe

developmentprocess.TransitioningtoSoftware-as-a-Service(SaaS)andcloud-hostedsecuritymanagementsystemscannotonlycutdownon

thetimeandcostsassociatedwithmanaginghardware,serversand

updates,butalsoenhancethreat

detection,improvecomplianceand

acceleratedeployment.

>

/securing-digital-core

Whyreinventionputsyouatrisk6

SecuringtheDigitalCore

Why

reinventionputsyou

atrisk

Gettingsecurityrightisoneofthekeyenablerstobecoming

reinventionready,asitbuildsa

foundationoftrustandresilience

thatallowsforconfidentinnovation.

>

/securing-digital-core

Companiesaretryingtofigureouthownewtechnologieschangetheirbusiness,and

consequently,howtoembedthemdeepwithintheirdigitalcoretoacceleratereinvention.AtAccenturewedefinereinventionreadinessasacontinuousstateofsupportingcurrentbusiness,drivingefficiencyandeffectiveness.Atthesametime,respondingtothe

ongoingneedsoftheorganizationandquicklyadoptingthelatesttechnologyinnovations.Therefore,securitymustbeequallyagiletoaddressanynewthreatsoremergingneeds.

ToutilizethefullpowerofgenerativeAIand

enterprisetechnologytransformation,you

needareinvention-readydigitalcore.Adigitalcoreismadeofsevendifferentandalways

workingpartsthathelporganizationskeep

reinventingthemselves.Digitalplatforms,

dataandAI,andadigitalfoundation,whichincludescloudfirstinfrastructure,security,composableintegrationandacontinuum

controlplane(Figure1).

Organizationswithareinvention-ready

digitalcorefollowthreetenets:theymaintainindustry-leadinglevelsofcapability,theyshiftinvestmentstowardstrategicinnovation,andtheyproactivelymanagetheirtechnicaldebt.

Securityisanintegralpartofthedigital

core—embeddedintotheveryfoundationandintegratedthroughouteachlayer.Without

security,thedigitalcoreisvulnerable,makingitharderandmoreexpensivetoreinventand

drivecompetitiveness.Today,continuous

businessreinventionisusuallypoweredby

technologicalenablementthatreachesintothebusinessandacrossplatforms,partnersand

customers,spanningmultipleenvironments

andarchitectures.Ourresearchshowsthat

83%oforganizationsarespeedinguptheir

reinventionefforts4,with99.7%ofexecutives

sayingtheyarecommittedtoestablishingnewlevelsofperformanceintheirindustry5.

54%

offinancialservices

executivessaythateffortstotransformorreinvent

thebusinessandenhance

customerexperiencehaveintroducedmoretechrisks6.

SecuringtheDigitalCoreWhyreinventionputsyouatrisk7

>

/securing-digital-core

SecuringtheDigitalCoreWhyreinventionputsyouatrisk8

Whatisadigitalcore?

Adigitalcoreisanewwaytothinkaboutandworkwithtechnology.

Accenturedefinesadigitalcoreasthecriticaltechnologicalcapabilitythatcancreateandempoweranorganization'suniquereinventionambitions.Buildingthistailoreddigitalcorerequiresintegratingadvanceddigitalplatforms,a

seamlessdataandAIbackboneandasecurefoundationusingradicalnewengineeringprinciples.

Thisfit-for-purposedigitalcoreenablesanorganization

toaccelerateaheadofcompetitionandachievetheir

ambitionsinthemostefficientfashion—usingtherightmixofcloudpracticesforagilityandinnovation;dataandAI

fordifferentiation;applicationsandplatformstoaccelerategrowth,next-generationexperiencesandoptimized

operations—withsecuritybydesignateverylevel.

Figure1:Componentsofadigitalcore

Digitalplatforms

Combiningapplicationsintoplatformsthatgeneratenewsourcesofvalue.

Data&AIbackbone

Data:informationaboutabusinessanditscustomersthat’saccessibleandusable.

AI:artificialintelligenceusedtoboostproductivity,createcontentandmore.cloudandedgecomputing.

Digitalfoundation

Cloudfirstinfrastructure:flexible

infrastructurethatcanbeamixofpubliccloud,privatecloudandedgecomputing.

Security:embeddingcybersecuritypracticestomaximizeresiliency.

Continuumcontrolplane:acommand-and-controlcenterthatprovidesvisibilityintokeypartsoftheentiretechstack.

Composableintegration:theabilitytoconnectallpartsofthedigitalcoresotheycanworktogether.

/securing-digital-core

SecuringtheDigitalCoreIssecuritykeepingup?9

Issecurity

keepingup?

Asorganizationsracetoembrace

emergingtechnologiestoenable

newofferingsandexperiences,theyoftenprioritizespeedoversecurity.

>

/securing-digital-core

Issecuritykeepingup?10

SecuringtheDigitalCore

Onaverage,there'sa23-pointlaginsecuritycapabilitiesfororganizationthathaveyettoachievean'industry-leading'digitalcore.

Figure2:Securitymaturitygap

Infact,sevenin10executivessaytheyimplementsecuritycontrols

onlyforcriticalfunctionsordeployit

aftertransformationisfinalizedand

vulnerabilitiesaredetected7.Thishasaknock-oneffect.Whenrobustsecuritymeasuresandstrategiesarenot

included‘bydesign’fromtheoutsetasthebusinessadoptsnewtechnologies,thecompany’sdigitalcorebecomes

vulnerabletothreatsandtechnicaldebtgrowsasthelistoffractional

securitysolutionsexpands.Thismakes

remediationincreasinglycostlyandtime-consumingandlimitsbusinessagility.

Onaverage,there'sa23-pointlaginsecuritycapabilitiesbetweenthoseorganizations

withan'industry-leading'digitalcore—

definedasthetop25%inourDigitalCore

Index,andthoseinthebottomquartile

(Figure2).MostorganizationsfallbehindonmeasuressuchasuseofDevSecOpsand

ZeroTrustidentityandnetworks,security

configuration,threatmodellingandsecuringcyber-physicalsystems.

Thisgapisfurtherexacerbatedbythe

challengeoftechnicaldebt.Thetotal

technicaldebtintheUSaloneisestimatedtoexceed$1.5trillion8.Securityispartofthisproblem,with34%oforganizations

citingitasatopcontributortotechnicaldebt,accordingtoourresearch.Itarises

DigitalCoreIndex—SecurityMaturityScores

82

fromquicksolutionstosecurityproblemsthateventuallyneedtoberedonebecausetheyarenoteffective.Besides,point-

+23

59

securitytoolsthatdonotintegratewith

orprovidecontexttoothersecuritytools,reducesecuritypostureandvisibilitywhileincreasingcost.

Moreover,securitycomplexityandtalentshortagesaddanotherlayerofdifficulty.Organizationsreportthattheyrelyonanaverageof76securitytoolstomanage

theirsecurityposture9.Thiscomplicatestransformationefforts.Combinedwith

RestTop25%

talentshortages—thereare4.8million

(n=1250)(n=250)

unfilledcybersecurityjobsworldwide10—thiscomplexitysignificantlyhinders

organizations’abilitytoscaleeffectively.

>

/securing-digital-core

SecuringtheDigitalCoreCostofcyberattacks11

Costof

cyberattacks

Cybersecurityremainsthetop

globalbusinessrisk,affecting

customertrust,businessgrowthandcorporatevalue.

>

/securing-digital-core

SecuringtheDigitalCoreCostofcyberattacks12

Breachesnotonlyincreasefinancial

costsbutalsohavesignificantreputationalconsequences—79%ofcybersecurity

professionalsrankreputationastheirtopconcernduringanattack11.

Asorganizationspreparetoinvestmoreinsecurityservices,prioritizinginvestmentsthatalignwithgrowthstrategiesisa

criticalchallenge.While96%ofCEOsview

cybersecurityasessentialforgrowth,74%

remainconcernedaboutminimizingdamagefrompotentialcyberattacks12.Furthermore,

cybersecurityhasbecomeakeyelementof

corporateESG(Environmental,SocialandandGovernance)evaluations,influencingratings,transactionsandmergersandacquisitions,

withpubliclytradedcompaniesseeingan

average7.5%stockdropafteradatabreach13.

Theurgencyoftheseconcernsis

underscoredbytherapidlyevolvingthreatlandscape.

>

Securityprofessionalsandexecutivesalikerecognizetherisingdangers:

•Seventy-fivepercentofsecurity

professionalsreportanincreaseincyber-attacksoverthepastyear14,and56%of

executivesbelievethatgenerativeAIgivesattackersaclearadvantage15.

•SincethelaunchofChatGPT,phishingattackshavesurgedby1,265%16and

deepfakeattemptsusinggenerativeAIhaveskyrocketedby3,000%year-over-yearin202317.

•Accenture’sCyberIntelligence(ACI)

researchershavealsonoteda223%rise

inthetradeofdeepfake-relatedtoolson

darkwebforumsbetweenQ12023and

Q1202418.Moreover,cloudenvironment

intrusionshavesurged75%from2022to

2023,asthreatactorsexploituniquecloudfeaturestoinitiateattacks19.

Thegravityoftheseconcernsisreflectedinseveralrecenthigh-profileincidents:

•AGreaterChinamultinationalsuffered

a$25millionlossastheresultofa

sophisticateddeepfakescam.The

scammersdigitallyrecreatedthe

company’schieffinancialofficeralong

withotheremployeesonaconferencecallinstructingcolleaguestotransfermoney20.

•AvulnerabilityinanAsianairline’ssoftwareledtoamassivedatabreach,exposing

6.5terabytesofdataincludingthe

personaldetailsofflightcrews.ThebreachstemmedfromamisconfiguredAmazon

WebServicesbucket.Safetydetectives

found23millionfiles,includingsensitive

flightcharts,navigationdataandplain-textpasswords21.

•InMay2023,aglobalautomobile

companyreportedadatabreachaffectingabout260,000customersduetoa

misconfiguredcloudenvironment.Data

fromcustomersinJapan,AsiaandOceaniawasexposed.Theautomobilecompany

swiftlyblockedexternalaccessand

initiatedaninvestigationacrossallcloudenvironments22.

Thesethreeincidentshighlightmounting

securitychallengesasthethreatlandscapecontinuestoevolve.Butorganizations’

securitypoliciesandbehaviorsamidtherushtoreinventionalsocontributesignificantlytothegrowingsecuritychallenge.

79%

ofcybersecurity

professionalsrank

reputationastheirtop

concernduringanattack11.

/securing-digital-core

Closingthesecuritygap13

SecuringtheDigitalCore

Closingthesecuritygap

Toclosethegapinsecurity

maturitywithinthedigital

coreandachievereinventionreadiness,companiesshouldengagethreestrategiclevers.

>

/securing-digital-core

SecuringtheDigitalCoreClosingthesecuritygap14

Lever01

Streamlinesecurity

tolowercostsand

optimizeinvestments

Rationalizingsecurityeliminates

redundancies,drivingdowncosts,

streamliningprocessesandoptimizing

investments.Efficient,integratedsolutionsleadtobetterresourceallocationanda

strongersecurityposture.

>

Actionstotake:

Consolidatevendorsandtools

Consolidatecybersecurityproductstostreamlineyourtoolsetsandreduce

complexity.Thiswillhelpyoutoachieve

bettersecurityoutcomessuchasfasterthreatdetectionandimprovedincidentresponse

times.

Achievingthisrequiresathoroughevaluationofexistingsecuritysolutionstointegrate

themintoaunified,streamlinedsystemthat

eliminatesredundanciesandenhancesoverallsecurity.Byharnessingthecapabilitiesof

generativeAI,youcanunlocknewlevelsof

efficiencyandeffectivenessinyoursecurity

operations.Forexample,generativeAIcan

combinethefunctionalitiesofvarioussecuritytools—suchasintrusiondetection,threat

intelligenceandincidentresponse—intoasingle,cohesivesystem.

Adoptintegratedplatformsoverstandalonetools

Investinintegratedplatformsinsteadof

relyingonisolated,standalonetoolsto

simplifymanagementandfortifyyour

organization’sdefenseagainstemerging

threats.Consolidatedplatformsnotonly

streamlineoperationsbutalsoenable

real-timeintelligencesharing,whichis

vitalforpreventingzero-daythreats.By

integratingdiversedatapoints,dashboardsanduserexperiences,theseplatforms

offersecurityteamsaholisticviewoftheirorganization’sriskposture.Thisunified

approachempowersteamstoidentifyand

mitigatethreatsmoreswiftlyandefficiently.Moreover,thecentralizationofdataand

toolshelpsreducetheriskofoversightandimprovestheabilitytocorrelateevents

acrossdifferentsystems,leadingtoamorerobustandresilientsecuritystrategy.

Retirelegacytoolsandinvestinbest-of-their-kindsolutions

Upgradetomoderntoolstostreamlinemanagementandoptimizeresource

allocation.Startbytransitioningawayfrom

legacytoolsthatnolongeralignwithmodern

businessprocessestoaccelerateyour

organization’ssecuritytransformation.This

strategicshiftwillnotonlyreducecomplexitybutalsoeliminateredundancies,thereby

significantlyenhancingyouroverallsecurity

posture.Directyourresourcestoward

advancedtechnologiesthatproviderobustprotectionagainstcontemporarythreats.

/securing-digital-core

SecuringtheDigitalCoreClosingthesecuritygap15

Casestudy

ZeroTrustjourneyforapublic

transportorganization

Apublictransportationorganizationneededtoenhanceits

cybersecurity,byintroducingZeroTrustprinciplesacrossitshybridcloudenvironment.Byassessingthecybersecurityprogram,

identifyinggapsanddefiningaZeroTrustvision,Accenture

cocreatedapracticalplananddevelopedastrategicprojectcatalog,prioritizingkeyprojectssuchasacybersecuritymeshforidentity

andcertificatemanagement.Theendresultwasreducedbusinessdisruptionriskandincreasedestatevisibilityfrom10%to90%+,

connectedteamsacrosssiloswithredefinedrolesandgovernanceandcostreductions,includinganoptimizedinvestmentstrategy,addedautomationandconsolidatedsoftwarelicenses.

/securing-digital-core

SecuringtheDigitalCore

Lever02

Modernizeandintegratesecuritywiththebusiness

Closingthesecuritygap16

Creatingareinvention-readydigitalcorerequiresrethinkingandrevisitingsecuritywhilealsoinvestingininnovationand

remediatingtechnicaldebt.Organizationscannotaffordtoprioritizerapidgrowth

attheexpenseofsecurity.Ensuring

robustsecurityinvolvesnotonlyupdatingmeasuresfornewinnovationsbutalso

addressinglegacysystemswithdedicatedsecurityprogramsormodernization.

Aholisticapproachtosecurityisessential.Manysecurityprocessesextendbeyond

thetypicalsecurityfunctionsandneed

tobemodernizedalongsidethebusinesstoachieveresilience.Anagilesecurity

programwillenableorganizationsto

respondswiftlytoattacks,ensureseamlessoperationsandreducecosts.

>

Actionstotake:

Embedsecurityintotheentire

cloudnativeapplicationprotection(CNAPP)ecosystem

Leverageproprietarytemplates,predefined

scripts,playbooksandtechnology

integrationstoensurerobustsecurity

inbothbrownfieldandgreenfieldclient

environments.Rapidlymigratingsecurity

operationstothecloudenablesorganizationstoaccessadvancedtoolsandpre-

builtassets,modernizingtheirsecurity

infrastructure.Forinstance,byimplementing

IaC,securityscanningandautomated

continuousintegrationandcontinuous

delivery/deployment(CI/CD)pipelines,

securityconfigurationscanbestandardizedandintegratedearlyinthedevelopment

lifecycle.GenerativeAIcanfurtherenhancecloudsecuritybyprovidingTerraform

IaCtemplateswithembeddedsecurity

parameters,simplifyingthecreationofsecureandcompliantinfrastructurewhilereducing

configurationerrors.Additionally,securing

yourgenerativeAIcloudserviceprovider

(CSP)environmentsiscrucialtosafelydeployuniqueAIserviceslikeOpenAIonAzure,

GoogleGCPGeminiandAWSBedrock.Thesestrategicmovesensuresecurityisagile,

scalableandcapableofmeetingthedemandsofadynamicthreatlandscape.

SecuredataandAI

TocombatevolvingthreatsinAI

environments,youneedthesupportofall

keydepartments,includinglegal,regulatory,humanresourcesandoperations.Thiscan

beachievedbyformingcross-functional

teamstooverseeAIadoption,auditsand

security,whileestablishingclearpoliciesandcontrols.AIsecurityshouldbeincorporatedintogovernance,riskandcompliance(GRC)frameworks.Organizationsshoulddefine

AIgovernanceprinciplesbasedontheir

specificbusinessneedsandassignsharedresponsibilitiesacrosslegalandcompliancefunctions.Collaborationwithgovernmentsandindustrypeerscanhelpshapeforward-lookingcybersecuritypolicies.

/securing-digital-core

SecuringtheDigitalCoreClosingthesecuritygap17

Havingaunifiedsecurityfoundationwith

acommondatamodelandintegrated

operationsensuresseamlessAIintegration.

WithAImodelsproliferating,AIfirewalls

customizedtofitorganizationalpolicies

provideastrongfirstlineofdefense,securinginteractions,preventingdataleakageand

blockingmaliciousorunauthorizeduses.ButAIfirewallsalonearen’tenough.Afulldefensivestrategymustincludesecure

architecture,dataprotection,accesscontrolsandcontinuousmonitoringtoprevent

vulnerabilitiesinareaslikeorchestration

layers,RAGdatabasesandAPIs.SecuringtheentireAIstack,includingthedatalayer,the

foundationalmodel,AIapplications,aswellasidentityaccessandcontrols,isvital.

Additionally,incorporatingenrichedriskcontext—suchasthroughredteamingoradversarialtesting—enhancessecurity

byrigoro