The Philippines is experiencing a significant digital shift, with businesses rapidly adopting cloud services and remote work. However, this transformation has outpaced the development of effective cybersecurity strategies, leaving organizations vulnerable to cyber threats.
Arun Kumar, Regional Director for APAC at ManageEngine, notes that the pandemic accelerated cloud adoption and remote work, ultimately increasing the attack surface for many companies. "What has completely transformed after COVID is people taking the cloud approach and enabling remote workforce," he said.
Outdated Strategies Leave Gaps in Security
An incident doesn’t happen just like that. It’s a sequence of different events.
Arun Kumar, Regional Director for APAC, ManageEngine
Prior to the pandemic, protecting corporate networks was more straightforward. Most employees worked on-site, and data was kept within company walls. This has changed dramatically as businesses have shifted to digital platforms, creating multiple points of vulnerability.
- Increased reliance on cloud and SaaS platforms
- More mobile devices and remote access points
- Disjointed security tools that fail to integrate
Kumar points out that many firms have added more technology without rethinking their cybersecurity approach. They often manage different security components separately, which can allow attackers to navigate through systems undetected. "Unless you are able to build a holistic view across different applications, users, identities, devices, databases, and hardware, you will not be able to proactively manage your cybersecurity posture," he asserted.
Shifting Perspectives on Cybersecurity
The evolution of IT roles has also influenced cybersecurity strategies. Kumar explains that IT departments are now expected to ensure the security and availability of digital services, moving beyond their traditional support roles. This shift reflects a broader reliance on technology across sectors.
Despite ongoing investments in on-premise infrastructure, Kumar does not see this as a sign of technological lag. He attributes it to regulatory requirements surrounding data protection. "The success in terms of on-premise is predominantly because of regulations, data protection, and data sovereignty requirements," he noted.
- Regulatory frameworks affecting data management
- Ongoing investments in digital capabilities by banks and IT firms
- Need for a comprehensive approach to cybersecurity
As artificial intelligence becomes more integrated into business operations, Kumar cautions that it can be a double-edged sword. While AI can enhance productivity, cybercriminals are also leveraging it to launch more sophisticated attacks.
The shortage of qualified cybersecurity professionals complicates matters. Kumar emphasizes the need for organizations to invest in retraining their staff and for educational institutions to equip new graduates with relevant skills. He concludes that effective cybersecurity is a shared responsibility that extends beyond technology to include employee awareness.
Conclusion
For businesses in the Philippines, addressing cybersecurity is not just about technology implementation. It requires a comprehensive strategy that integrates various aspects of operations, enabling them to withstand the complexities of modern threats.