Scott Crawford is Research Director for the Information Security Channel at 451 Research, a part of S&P Global Market Intelligence, where he leads coverage of emerging trends, innovation and disruption in the information security market. Scott is also a member of 451 Research's Center of Excellence for Quantum Technologies.
Well known as an industry analyst covering information security prior to joining 451 Research, Scott has experience as both a vendor and an information security practitioner. At IBM, Scott served as a senior strategist with IBM Security. He is the former CISO of the Comprehensive Nuclear-Test-Ban Treaty Organization (CTBTO) International Data Centre in Vienna, Austria, where he pioneered the implementation of security policy and architecture for a non-governmental organization (NGO) serving more than 150 nations.
His experience includes systems and security management for leading organizations in both the private and public sectors, from Emerson to a division of the University Corporation for Atmospheric Research in Boulder, Colorado, focused on the collection, management and analysis of geophysical and meteorological data.
The company hopes to help security teams lower the huge number of vulnerabilities and alerts by orchestrating and automating manual processes such as vulnerability discovery and prioritization. It is also working on bridging the gap between security teams and IT operations by enabling simple collaboration, playbooks and automated remediation.
Remote work at scale compounds an exploding attack surface. Acceleration in third-party cloud and service providers raise new issues for enterprise control. Secure access, an overhaul in security operations, cooperation between cloud pros and security experts, and the impact of ESG are just four themes that could characterize security in 2021 and beyond -- unless a major year-end 2020 incident disrupts everything.
Organizations have become increasingly sensitive to their exposures to the risks introduced by a growing plethora of third-party providers, products and services in the IT supply chain. The recently revealed attacks against SolarWinds, FireEye, Microsoft and others, with possible fallout for many more, highlight the daunting reality of the risk management challenge facing businesses going forward.
Recently disclosed extensive interrelated incidents involving SolarWinds, FireEye, Microsoft and several other organizations have led to the usual round of finger-pointing, but that helps no one. It does reveal how many fail to understand how attackers succeed " and why it's vital that we apply what we learn from these cases.
A new year means it's time for our annual look at market trends. But weighing the factors that drive innovation also means recognizing the frustrations that innovation must overcome. We look at five areas of concern based on our research and conversations with enterprise security practitioners and technology providers.
With few opportunities as valuable to an adversary as email, and major vendors invested in email functionality, email security is ripe for disruption. INKY calls on subtlety and sophistication to advance the nature of email threat defense and challenge attackers and other contenders for email security alike.
New Alert Set
"My Alert"
Failed to Set Alert
"My Alert"
Here are a few tips for navigating our Research.
Quickly access any of our research and data products.
Browse the research & data that aligns with your specific interest.
Discover new and more flexible ways of finding relevant content.
Set notifications for the topics & companies you care about most.
Access any page in the dashboard from here.
Hand picked content for you and your team.
