Commercial Director of Security Vision LLC Ekaterina Cherun
Posted: Wed Jan 22, 2025 7:10 am
nton Kuzmin, Technical Director of Innostage LLC, expressed the opinion during the conference "Information Security 2023. Results of the Year" that after the shock of 2022, many managers and business owners turned away from cybersecurity towards their core business: "If a manager has to choose between implementing a new security system and delivering new equipment, he will choose the latter with 100% accuracy." According to his assessment, in such conditions, dialogue with business again comes to the forefront.
Head of Pre-Sales Support estonia whatsapp number database at Kaspersky Lab Evgeny Budarin recalled that some complacency arose after it was possible to replace what stopped working after the departure of foreign vendors. And this process, in his opinion, was fully completed by the end of 2022. But at the same time, Evgeny Budarin believes that customers are ready to implement something new if it solves an urgent problem.
also drew attention to the reduction of budgets in the public sector, which affected demand. However, according to her, government agencies remain the largest buyer of information security products.
However, Andrey Zaikin, Director of Business Development at K2 Cybersecurity LLC, does not see any difficulties with the demand for information security products. In his opinion, this is due to the fact that threats have not disappeared, moreover, incidents have become much more destructive due to the fact that attackers have switched from attacks that only had a propaganda and image effect, such as defacement of websites, to those that lead to serious damage, up to the complete destruction of infrastructure. Andrey Zaikin also saw a trend in which the IT and information security departments in the company have intensified dialogue and are moving away from traditional rivalry, including for the allocation of budgets.
Ilya Shabanov, CEO of AM Media LLC, suggested that the intensification of the dialogue between IT and information security is facilitated by the fact that one of the consequences of the wave of attacks in 2022 was that information security in many organizations turned out to be more mature than IT. In addition, Alexey Dashkov, Director of the Product Management Center of R-Vision VM LLC, noted that information security has accumulated more experience in import substitution and IT is ready to adopt it.
Andrey Dugin, head of the MTS RED cybersecurity center, suggested that many potential customers are waiting for the emergence of new products that should enter the market in the first half of 2024. Moreover, according to his suggestion, 2024 will be the real year of discoveries in both the domestic IT and information security markets.
Evgeny Budarin did not rule out that a significant portion of customers who fall under the requirements of presidential decree No. 250 "On additional measures to ensure the information security of the Russian Federation" - this document sets the deadline for the transition to domestic means of protection for a total of 500 thousand Russian companies by January 1, 2025 - will delay the transition until the last minute.
Alexey Pavlov, Business Development Director of the Solar JSOC Cyberattack Countermeasures Center of the Solar Group, noted that in the context of the formed transition to new solutions, they will forget about real security, which will not lead to a reduction in risks, but to the exact opposite result. He recalled that attackers have already learned to successfully penetrate the infrastructure that runs Russian operating systems, as representatives of the National Center for Countering Computer Incidents spoke about at the SOC-Forum 2023. In addition, Alexey Pavlov noted that if in 2022 the bulk of attacks were associated with the exploitation of vulnerabilities in MS Exchange, then in 2023 - in the Bitrix24 content management system.
Pavel Korostelev, head of the product promotion department at Code Bezopasnosti LLC, sees the tragedy of the situation in the fact that the attack vectors have not changed one iota in 10 years. The problem, in his opinion, is mostly not the lack of protection tools, but the immaturity of personnel and processes.
Pavel Korostelev also recalled the forecast he made exactly a year ago that in the process of import substitution, the use of both legacy foreign and Russian solutions in one infrastructure is a serious challenge for information security, if only because different operating systems, including those based on Linux, have different formats of system logs.
Head of Pre-Sales Support estonia whatsapp number database at Kaspersky Lab Evgeny Budarin recalled that some complacency arose after it was possible to replace what stopped working after the departure of foreign vendors. And this process, in his opinion, was fully completed by the end of 2022. But at the same time, Evgeny Budarin believes that customers are ready to implement something new if it solves an urgent problem.
also drew attention to the reduction of budgets in the public sector, which affected demand. However, according to her, government agencies remain the largest buyer of information security products.
However, Andrey Zaikin, Director of Business Development at K2 Cybersecurity LLC, does not see any difficulties with the demand for information security products. In his opinion, this is due to the fact that threats have not disappeared, moreover, incidents have become much more destructive due to the fact that attackers have switched from attacks that only had a propaganda and image effect, such as defacement of websites, to those that lead to serious damage, up to the complete destruction of infrastructure. Andrey Zaikin also saw a trend in which the IT and information security departments in the company have intensified dialogue and are moving away from traditional rivalry, including for the allocation of budgets.
Ilya Shabanov, CEO of AM Media LLC, suggested that the intensification of the dialogue between IT and information security is facilitated by the fact that one of the consequences of the wave of attacks in 2022 was that information security in many organizations turned out to be more mature than IT. In addition, Alexey Dashkov, Director of the Product Management Center of R-Vision VM LLC, noted that information security has accumulated more experience in import substitution and IT is ready to adopt it.
Andrey Dugin, head of the MTS RED cybersecurity center, suggested that many potential customers are waiting for the emergence of new products that should enter the market in the first half of 2024. Moreover, according to his suggestion, 2024 will be the real year of discoveries in both the domestic IT and information security markets.
Evgeny Budarin did not rule out that a significant portion of customers who fall under the requirements of presidential decree No. 250 "On additional measures to ensure the information security of the Russian Federation" - this document sets the deadline for the transition to domestic means of protection for a total of 500 thousand Russian companies by January 1, 2025 - will delay the transition until the last minute.
Alexey Pavlov, Business Development Director of the Solar JSOC Cyberattack Countermeasures Center of the Solar Group, noted that in the context of the formed transition to new solutions, they will forget about real security, which will not lead to a reduction in risks, but to the exact opposite result. He recalled that attackers have already learned to successfully penetrate the infrastructure that runs Russian operating systems, as representatives of the National Center for Countering Computer Incidents spoke about at the SOC-Forum 2023. In addition, Alexey Pavlov noted that if in 2022 the bulk of attacks were associated with the exploitation of vulnerabilities in MS Exchange, then in 2023 - in the Bitrix24 content management system.
Pavel Korostelev, head of the product promotion department at Code Bezopasnosti LLC, sees the tragedy of the situation in the fact that the attack vectors have not changed one iota in 10 years. The problem, in his opinion, is mostly not the lack of protection tools, but the immaturity of personnel and processes.
Pavel Korostelev also recalled the forecast he made exactly a year ago that in the process of import substitution, the use of both legacy foreign and Russian solutions in one infrastructure is a serious challenge for information security, if only because different operating systems, including those based on Linux, have different formats of system logs.