Page 140 - Cyber Defense eMagazine September 2022

By capabilities, I mean the people, processes, technologies and supplier relationships that enable a
business to run and grow. Once you have a true understanding of these fundamental elements,
interdependencies, risks and impact, you can assess where the threats and weaknesses among them lie
and balance where you need to remediate and invest.

The transformation era

At RSM, we talk a great deal about the ‘The Transformation Era’: a time when businesses, governments
and communities are focused on post-COVID-19 recovery through digital-first, data-driven technological
solutions. As a global organisation, RSM has over the years focused on accelerating the transformation
of its entire network while supporting clients of our member firms transform for future growth. Today we
are building on our existing agility and resilience by putting in place new technologies to deepen our
dedication to quality across the more than 860 offices within our growing network of independent firms.

The adoption of new technology and a continuous focus on innovation is the key to all organisations
moving forward, yet it also opens up new areas of risk. It is essential that leaders build a security
conscious culture and reinforce it constantly though knowledge sharing and best practice. RSM firms
around the world are embracing innovations like AI, big data and automation that can help plug skills
gaps created by the great resignation, reduce reliance on manual processes to free-up our experts to
focus on more exciting project work, and create new possibilities for businesses.

Emerging technologies and the risk of remote working

New technologies enable these possibilities, but they also create access points, data sources,
vulnerabilities and gaps that can be exploited by criminals. It is critical that any decision to implement
new technology has security front of mind. To ensure growth and competitive advantages it is important
not to slow the pace of innovation and instead continue to enhance our business capabilities. It is also
important to ensure the appropriate due diligence checks are carried out so that new solutions designed
to help a business do not actually end up causing a negative impact instead.

Another technology risk relates to an organisation’s people and, specifically, the risk that comes from
catering to employees’ newly acquired expectations around remote and flexible working. A businesses’
digital infrastructure and data risk now extends into people’s homes and personal devices; the need for
up-to-date and tailored training, as well as the skills to embed robust systems and processes into the
organisation, has never been more important if this is not to become an easy target for criminals.

Global risk exposure in the supply chain

Gartner predicts that by 2025, 45% of organisations worldwide will have experienced attacks on their
software supply chains, a three-fold increase from 2021.

Cyber Defense eMagazine – September 2022 Edition 140
Copyright © 2022, Cyber Defense Magazine. All rights reserved worldwide.