2025 Trends in Information Security
Scott Crawford is research director of the Information Security channel at S&P Global Market Intelligence, where he leads the industry analyst team covering innovation, disruption and strategic players in cybersecurity and cyber risk. Scott joined S&P Global through its 2019 acquisition of 451 Research, where he has led the Information Security channel since 2015. In addition to directing the Information Security channel’s research efforts, Scott covers forces and events shaping cybersecurity. He maintains a focus on areas including security operations, cyber risk management, the intersection of AI/machine learning and cybersecurity, and related interests. As a practitioner, Scott was the first information security officer for the Comprehensive Nuclear-Test-Ban Treaty Organization’s International Data Centre in Vienna, with a background including systems and security management at the University Corporation for Atmospheric Research in Boulder, Colorado. His private-sector experience ranges from startups to leading industry players such as IBM, where Scott was a senior strategist with IBM Security. Scott holds a Bachelor of Arts in molecular, cellular and developmental biology from the University of Colorado and a postgraduate Master of Science from the University of Salford (UK), with additional graduate study in telecommunications at the University of Colorado and in information systems at the University of Denver.
Organizations are increasingly turning to managed security service providers for help with closing cybersecurity gaps and protecting their IT environments due to the ever-changing and increasing threat landscape. Although the specific cybersecurity needs for each individual organization vary, firms are increasingly seeking MSSPs that can quickly adapt, embrace seismic shifts, modernize operations, and deliver tangible and valued outcomes. This evolution will require many MSSPs to modernize their approach to delivering managed security services.
Organizations are increasingly turning to managed security service providers for help with closing cybersecurity gaps and protecting their IT environments due to the ever-changing and increasing threat landscape. Although the specific cybersecurity needs for each individual organization vary, firms are increasingly seeking MSSPs that can quickly adapt, embrace seismic shifts, modernize operations, and deliver tangible and valued outcomes. This evolution will require many MSSPs to modernize their approach to delivering managed security services.
In the time span of barely one hour, thousands of pagers in the Middle East exploded; 24 hours later, hundreds of walkie-talkies followed. A meticulously planned cyber-physical operation with precision targeting is adding a new chapter to digital warfare, with an impact similar to previous attacks bridging the two realms.
Technology platforms are a highly visible trend in cybersecurity, with strategies that are prominent in six domains. The synergies are evident, but platforms have their limits. As recent events have made clear, they must also navigate the "paradox of success" by mitigating the concentration of risk that is introduced by consolidation.
Only a few weeks before one of the largest annual cybersecurity gatherings, a global IT outage affecting Microsoft Windows systems was precipitated by problems with a CrowdStrike update. The incident was a dominant theme, but it wasn't the only cybersecurity event of the past year to leave a lasting mark in Las Vegas.
New Alert Set
"My Alert"
Failed to Set Alert
"My Alert"