Skip to content
Advertisements

The State Of IoT Intelligence, 2018

  • Sales, Marketing and Operations are most active early adopters of IoT today.
  • Early adopters most often initiate pilots to drive revenue and gain operational efficiencies faster than anticipated.
  • 32% of enterprises are investing in IoT, and 48% are planning to in 2019.
  • IoT early adopters lead their industries in advanced and predictive analytics adoption.

These and many other fascinating insights are from Dresner Advisory Services’ latest report,  2018 IoT Intelligence® Market Study, in its 4th year of publication. The study concentrates on end-user interest in and demand for business intelligence in IoT. The study also examines key related technologies such as location intelligence, end-user data preparation, cloud computing, advanced and predictive analytics, and big data analytics. “While the market is still in an early stage, we believe that IoT Intelligence, the means to understand and leverage IoT data, will continue to expand as organizations mature in their collection and leverage of sensor level data,” said Howard Dresner, founder, and chief research officer at Dresner Advisory Services. 70% of respondents work at North American organizations (including the United States, Canada, and Puerto Rico). EMEA accounts for about 20%, and the remainder is distributed across Asia-Pacific and Latin America. Please see pages 11, 15 through 18 of the study for specifics regarding the methodology and respondent demographics.

Key insights gained from the study include the following:

  • Sales, Marketing and Operations are most active early adopters of IoT today. Looking to capitalize on IoT’s potential to gain real-time customer feedback on products’ and services’ performance, Sales and Marketing lead all departments in their prioritizing IoT’s value in the enterprises. 12% of Operations leaders say that IoT is critical to attaining their goals. Executive Management and Finance have yet to see the value that Sales, Marketing and Operations do.

  • Manufacturers see IoT as the most critical to achieving their product quality, production scheduling and supply chain orchestration goals. Insurance industry leaders also view IoT as critical to operations as their business models are now concentrating on automating inventory and safety management. Insurance firms also track vehicles in shipping and logistics fleets to gain greater visibility into how route operations can be optimized at the lowest possible risk of accidents. Financial Services and Healthcare are the next most interested in IoT with Higher Education and Business Services assign the lowest levels of importance by industry.

  • Investment in IoT analytics, application development and defining accurate, reliable metrics to guide development is the most critical aspect of IoT adoption today. Investments in the data supply chain including data capture, movement, data prep, and management is the second-most critical area followed by investments in IoT infrastructure.  Analytics, application development, and accurate, reliable metrics guiding DevOps are consistent with the study’s finding that early adopters have an excellent track record adopting and applying advanced and predictive analytics to challenging logistical, operations, sales, and marketing problems.

  • IoT early adopters or advocates prioritize dashboards, reporting, IoT use cases that provide data streams integral to analytics, advanced visualization, and data mining. IoT early adopters and the broader respondent base differ most in the prioritization of IT analytics, location intelligence, integration with operational processes, in-memory analysis, open source software, and edge computing. The data reflects how IoT early adopters quickly become more conversant in emerging technologies with the goal of achieving exponential scale across analytics and IoT platforms.

  • The criticality of advanced and predictive analytics to all leaders surveyed is at an all-time high. Attaining a (weighted-mean) importance score of 3.6 on a 5.0 scale, advanced and predictive analytics is today considered “critical” or “very important” to a majority of respondents. Despite a mild decline in 2017, importance sentiment (the perceived criticality of advanced and predictive analytics) is on an uptrend across the five years of our study. Mastery of advanced and predictive analytics is a leading indicator of IoT adoption, indicating the potential for more analytics pilots and in-production IoT projects next year.

  • The most valuable features for advanced and predictive analytics apps include support for a range of regression models, hierarchical clustering, descriptive statistics, and recommendation engine support. Model management is important to more than 90% of respondents, further indicating IoT analytics scale is a goal many are pursuing. Geospatial analysis (highly associated with mapping, populations, demographics, and other web-generated data), Bayesian methods, and automatic feature selection is the next most required series of features.

  • Access to advanced analytics for predictive and temporal analysis is the most important usability benefit to IoT adopters today. Second is support for easy iteration, and third is a simple process for continuous modification of models. The study evaluated a detailed set of nine usability benefits that support advanced and predictive activities and processes. All nine benefits are important to respondents, with the last one of a specialist not being required important to a majority of them at 70%.

Advertisements

Reinventing After-Sales Service In A Subscription Economy World

  • 91% of manufacturers are investing in predictive analytics in the next 12 months, and 50% consider Artificial Intelligence (AI) a major planned investment for 2019 to support their subscription-based business models.
  • New subscription business models and smart, connected products are freeing manufacturers up from competing for one-time transaction revenues to recurring revenues based on subscriptions.
  • By 2020, manufacturers are predicting 67% of their product portfolios will be smart, connected products according to an excellent study by Capgemini.
  • 71% of manufacturers are using automated sensors for real-time monitoring and data capture of a product’s condition and performance, yet just 25% have the infrastructure in place to analyze it and maximize product uptime.

Manufacturers need to break their dependence on just selling products to selling services if they’re going to grow. Smart, connected products with IoT sensors embedded in them are the future of subscription business models and a key foundation of the subscription economy.

Product Reliability and Uptime Help Create Subscription Economies

In a subscription economy world, whoever excels at product reliability and uptime grows faster than competitors and defines the market. Airlines with the highest on-time ratings have designed in reliability and uptime as part of their company’s identity; their DNA is based on these goals. Worldwide Business Research (WBR) in collaboration with Syncron, a global provider of cloud-based after-sales service solutions focused on empowering the world’s leading manufacturers to maximize product uptime and deliver exceptional customer experiences, recently surveyed to see how manufacturers are addressing the reliability and uptime challenges so critical to growing subscription business.

The research study, Maximized Product Uptime: The Emerging Industry Standard provides insights into how manufacturers can improve their after-sales service solutions. A copy of the study can be downloaded here (PDF, 23 pp., opt-in). Please see pages 20 – 23 for additional details on the report’s methodology. WBR and Syncron designed the survey to gain a deep understanding of manufacturers’ ability to deliver on their customers increasing demand for maximized product uptime, surveying 200 original equipment manufacturers (OEMs), with respondents evenly split between the U.S. and European markets, as well as 100 equipment end-users

Key insights from the study include the following:

  • 34% of manufacturers are ready to compete in a subscription economy and have created a service strategy based on maximized product uptime. 39% are planning to have one in two years, and 22% are predicting it will be in 2020 or later before they have on in place. Capgemini found that manufacturers’ plans for smart, connected products would extend beyond these projections, making it a challenge of manufacturers to realize the new subscription revenue they’re planning on in the future.

  • 71% of manufacturers are using automated sensors including IoT for real-time monitoring and data capture of a product’s condition and performance, yet just 25% have the infrastructure in place to analyze it and maximize product uptime.  51% of manufacturers have systems in place for analyzing the inbound data generated from sensors, yet report they still have more work to do to make them operational.  The 25% of manufacturers with systems in place and at scale will have at least an 18-month jump on competitors who are just now planning on how to make use of the real-time data streams IoT sensors provide.

  • Predicting part failures before they occur (83%), optimizing product functionality based on usage (67%), and using stronger analytics to evaluate product performance (61%) matter most to manufacturers pursuing subscription models. Autonomous product operation (56%) and implementing stronger analytics on ROI ( 50%) are also extremely important. These findings further underscore how manufacturers need to design in reliability and uptime if they are going to succeed with subscription-based business models.

  • 91% of manufacturers are investing in predictive analytics in the next 12 months, and 50% consider Artificial Intelligence (AI) a major planned investment for 2019.  Creating meaningful data models from the massive amount of manufacturing data being captured using automated sensors and IoT devices is making predictive analytics, AI and machine learning extremely important to manufacturers’ IT planning budgets for 2019 and beyond. Combining predictive analytics, AI and machine learning to gain greater insights into pre-emptive maintenance on each production asset, installed product or device is the goal. Knowing when a machine or product will most likely fail is invaluable in ensuring the highest uptime and service reliability levels possible.

  • 77% of manufacturers say having an after-sales service model is critical to their customers’ success today.  Customers are ready to move beyond the legacy transactional, break-fix model of the past and want a more Amazon-like experience when it comes to uptime and reliability of every device they own as consumers and use at work. Speed, scale and simplicity are the foundational elements of a subscription business model, and the majority of manufacturers surveyed say their customers are leading them into a value-added after-sales service model.

Tech Leaders Look To IoT, AI & Robotics To Fuel Growth Through 2021

  • 30% of tech leaders globally predict blockchain will disrupt their businesses by 2021.
  • IoT, Artificial Intelligence (AI) and Robotics have the greatest potential to digitally transform businesses, making them more customer-centered and efficient.
  • 26% of global tech leaders say e-Commerce apps and platforms will be the most disruptive new business model in their countries by 2021.
  • IDC predicts worldwide IoT spending will reach $1.1T by 2021.

These and many other insights are from KPMG’s recent research study Tech Disruptors Outpace The Competition. The study can be downloaded here (PDF, 42 pp., no opt-in.).  The methodology is based on interviews with 750 global technology industry leaders, 85% of whom are C-level executives. For additional details on the methodology, please see pages 32 and 33 of the study. The study found that the three main benefits of adopting IoT, AI, and robotics include improved management of personal information, increased personal productivity, and improved customer experience through personalized real-time information. Key insights gained from the study include the following:

  • IoT, Artificial Intelligence (AI) and Robotics have the greatest potential to digitally transform businesses, making them more customer-centered and efficient. Tech leaders also see these three core technologies enabling the next indispensable consumer technology and driving the greatest benefit to life, society, and the environment. KPMG’s research team found that tech companies are integrating these three technologies to create growth platforms for new business ventures while digitally transforming existing business processes. Tech leaders in the U.K. (21%), Japan (20%) and the U.S. (16%) lead all other nations in their plans for IoT digitally transforming their businesses by 2021. Please click on the graphic below to expand for easier reading.

  • 30% of tech leaders globally predict blockchain will disrupt their businesses by 2021. 50% of Japanese tech leaders predict that blockchain will digitally transform their industries and companies by 2021, leading all nations included in the survey.  IoT processes and the rich, real-time data stream sensors and systems are capable of delivering is predicted by tech leaders to be the primary catalyst that will enable blockchain to digitally transform their businesses. 27% of tech leaders globally expect IoT data and applications combined with blockchain to redefine their companies, supply chains and industries. Identity authentication (24%), automated trading (22%) and contracts (14%) are the 2nd through fourth-most disruptive aspects of blockchain by 2021 according to tech leaders. Please click on the graphic below to expand for easier reading.

  • 26% of global tech leaders say e-Commerce apps and platforms will be the most disruptive new business model in their countries by 2021. 19% see social media platforms creating the majority of new business models, followed autonomous vehicle platforms (14%) and entertainment platforms (11%).  KPMG’s analysis includes a ranking of top business models by country, with e-Commerce dominating four of the five regions included in the survey.

  • 50% of tech leaders expect media, transportation, healthcare, and transportation to experience the greatest digital transformation in the next three years.  Respondents most mentioned Amazon, Netflix, Alibaba, Uber, Google, and Facebook as examples of companies who will digitally transform their industries by 2021.  The following table provides insights into which industries by country will see the greatest digital transformations in the next three years. Entertainment platforms are predicted by tech leaders to have the greatest potential to digitally transform the media industry in the U.S. by 2021.

  • Tech leaders predict IoT’s greatest potential for adoption by 2021 is in consumer products, education, services, industrial manufacturing, and telecom. AI’s greatest potential to digitally transform business models is in healthcare and industrial manufacturing (both 11%), consumer products, financial, and services (10% each).  As would be expected, Robotics’ adoption and contribution to digitally transforming businesses will be most dominant in industrial manufacturing (15%), followed by healthcare (11%) and consumer, financial and services (10%). Please click on the graphic to expand for easier reading.

How Blockchain Can Improve Manufacturing In 2019

  • The business value-add of blockchain will grow to slightly more than $176B by 2025, then exceed $3.1T by 2030 according to Gartner.
  • Typical product recalls cost $8M, and many could be averted with improved track-and-traceability enabled by blockchain.
  • Combining blockchain and IoT will revolutionize product safety, track-and-traceability, warranty management, Maintenance, Repair & Overhaul (MRO), and lead to new usage-based business models for smart, connected products.
  • By 2023, 30% of manufacturing companies with more than $5B in revenue will have implemented Industry 4.0 pilot projects using blockchain, up from less than 5% today according to Gartner.

Blockchain’s greatest potential to deliver business value is in manufacturing. Increasing visibility across every area of manufacturing starting with suppliers, strategic sourcing, procurement, and supplier quality to shop floor operations including machine-level monitoring and service, blockchain can enable entirely new manufacturing business models. Supply chains are the foundation of every manufacturing business, capable of making use of blockchain’s distributed ledger structure and block-based approach to aggregating value-exchange transactions to improve supply chain efficiency first. By improving supplier order accuracy, product quality, and track-and-traceability, manufacturers will be able to meet delivery dates, improve product quality and sell more.

Capgemini Research Institute’s recent study, Does blockchain hold the key to a new age of supply chain transparency and trust? provide valuable insights into how blockchain can improve supply chains and manufacturing. A copy of the study is available here (PDF, 32 pp., no opt-in). Capgemini surveyed 731 organizations globally regarding their existing and planned blockchain initiatives. Initial interviews yielded 447 organizations who are currently experimenting with or implementing blockchain. Please see pages 25 & 26 of the study for additional details regarding the methodology.

Key takeaways of the study include the following:

  • Typical product recalls cost $8M, and many could be averted with improved track-and-traceability enabled by blockchain. Capgemini found that there was 456 food recalls alone in the U.S. last year, costing nearly $3.5B. Blockchain’s general ledger structure provides a real-time audit trail for all transactions secured against modifications making it ideal for audit and compliance-intensive industries.

  • Gaining greater cost savings (89%), enhancing traceability (81%) and enhancing transparency (79%) are the top three drivers behind manufacturer’s blockchain investments today. Additional drivers include increasing revenues (57%), reducing risks (50%), creating new business opportunities (44%) and being more customer-centric (38%). The following graphic from the study illustrates the manufacturer’s priorities for blockchain. Capgemini finds that improving track-and-traceability is a primary driver across all manufacturers, consistent with the broader trend of manufacturers adopting software applications that improve this function today. That’s also understandable given how additional regulatory compliance requirements are coming in 2019 and those manufacturers competing in highly regulated industries including aerospace & defense, medical devices, and pharma are exploring how blockchain can give them a competitive edge now

  • Digital marketplaces, tracking critical supply chain parameters, tracking components quality, preventing counterfeit products, and tracking asset maintenance are the five areas Capgemini predicts blockchain will see the greatest adoption. Based on interviews with industry experts and startups, Capgemini found 24 blockchain use cases which are compared by level of adoption and complexity in the graphic below. The use cases reflect how managing supplier contracts is already emerging as one of the most popular blockchain use cases for manufacturing organizations today and will accelerate as compliance becomes even more important in 2019.

  • Manufacturers have the most at-scale deployments of blockchain today, leading all industries included in the study. Blockchain adoption is still nascent across all industries included in the study, with 6% of manufacturers having at-scale implementations today. Customer products manufacturers lead in pilots, with 15% actively [purusing blockchain in limited scope today. And retailers trail all industries with 91% having only proofs of concept.

  • Combining IoT and blockchain at the shipping container level in supply chains increases authenticity, transparency, compliance to product and contractual requirements while reducing counterfeiting. In highly regulated industries including Aerospace & Defense (A&D), Consumer Packaged Goods (CPG), medical devices, and pharma, combining IoT and blockchain provides real-time data on the shipping container conditions, tamper-proof storage, each shipment’s locational history and if there have been changes in temperature and product condition. Capgemini sees use cases where a change in a shipment’s temperature as measured by a sensor change sends alerts regarding contractual compliance of perishable meats and produce, averting the potential of bad product quality and rejected shipments once they reach their destination.

  • Capgemini found that 13% of manufacturers are Pacesetters and are either implementing blockchain at scale or have pilots in at least one site. Over 60% of Pacesetters believe that blockchain is already transforming the way they collaborate with their partners. Encouraged by these results, Pacesetters are set to increase their blockchain investment by 30% in the next three years. They lead early stage experimenters and all implementers on three core dimensions of organizational readiness. These include end-to-end visibility across functions, detailed and defined supportive processes, and availability of the right talent to succeed.

  • Lack of a clear ROI, immature technology and regulatory challenges are the top three hurdles Pacesetter-class manufacturers face in getting blockchain initiatives accepted and into production. All implementations face these three challenges in addition to having to overcome the lack of complementary IT systems at the partner organizations. The following graphic compares the hurdles all manufacturers face in getting blockchain projects implemented by the level of manufacturers adoption success (Pacesetter, early-stage experimenters, all implementers).

Source: Capgemini Research Institute, Does blockchain hold the key to a new age of supply chain transparency and trust? October, 2018

How To Protect Healthcare IoT Devices In A Zero Trust World

  • Over 100M healthcare IoT devices are installed worldwide today, growing to 161M by 2020, attaining a Compound Annual Growth Rate (CAGR) of 17.2% in just three years according to Statista.
  • Healthcare executives say privacy concerns (59%), legacy system integration (55%) and security concerns (54%) are the top three barriers holding back Internet of Things (IoT) adoption in healthcare organizations today according to the Accenture 2017 Internet of Health Things Survey.
  • The global IoT market is projected to soar from $249B in 2018 to $457B in 2020, attaining a Compound Annual Growth Rate (CAGR) of 22.4% in just three years according to Statista.

Healthcare and medical device manufacturers are in a race to see who can create the smartest and most-connected IoT devices first. Capitalizing on the rich real-time data monitoring streams these devices can provide, many see the opportunity to break free of product sales and move into more lucrative digital service business models. According to Capgemini’s “Digital Engineering, The new growth engine for discrete manufacturers,” the global market for smart, connected products is projected to be worth $519B to $685B by 2020. The study can be downloaded here (PDF, 40 pp., no opt-in). 47% of a typical manufacturer’s product portfolio by 2020 will be comprised of smart, connected products. In the gold rush to new digital services, data security needs to be a primary design goal that protects the patients these machines are designed to serve. The following graphic from the study shows how organizations producing smart, connected products are making use of the data generated today.

Healthcare IoT Device Data Doesn’t Belong For Sale On The Dark Web

Every healthcare IoT device from insulin pumps and diagnostic equipment to Remote Patient Monitoring is a potential attack surface for cyber adversaries to exploit. And the healthcare industry is renowned for having the majority of system breaches initiated by insiders. 58% of healthcare systems breach attempts involve inside actors, which makes this the leading industry for insider threats today according to Verizon’s 2018 Protected Health Information Data Breach Report (PHIDBR).

Many employees working for medical providers are paid modest salaries and often have to regularly work hours of overtime to make ends meet. Stealing and selling medical records is one of the ways those facing financial challenges look to make side money quickly and discreetly. And with a market on the Dark Web willing to pay up to $1,000 or more for the most detailed healthcare data, according to Experian, medical employees have an always-on, 24/7 marketplace to sell stolen data. 18% of healthcare employees are willing to sell confidential data to unauthorized parties for as little as $500 to $1,000, and 24% of employees know of someone who has sold privileged credentials to outsiders, according to a recent Accenture survey. Healthcare IoT devices are a potential treasure trove to inside and outside actors who are after financial gains by hacking the IoT connections to smart, connected devices and the networks they are installed on to exfiltrate valuable medical data.

Healthcare and medical device manufacturers need to start taking action now to secure these devices during the research and development, design and engineering phases of their next generation of IoT products. Specifying and validating that every IoT access point is compatible and can scale to support Zero Trust Security (ZTS) is essential if the network of devices being designed and sold will be secure. ZTS is proving to be very effective at thwarting potential breach attempts across every threat surface an organization has. Its four core pillars include verifying the identity of every user, validating every device, limiting access and privilege, and utilizing machine learning to analyze user behavior and gain greater insights from analytics.

The First Step Is Protect Development Environments With Zero Trust Privilege

Product research & development, design, and engineering systems are all attack surfaces that cyber adversaries are looking to exploit as part of the modern threatscape. Their goals include gaining access to valuable Intellectual Property (IP), patents and designs that can be sold to competitors and on the Dark Web, or damaging and destroying development data to slow down the development of new products. Another tactic lies in planting malware in the firmware of IoT devices to exfiltrate data at scale.

Attack surfaces and the identities that comprise the new security perimeter of their companies aren’t just people; they are workloads, services, machines, and development systems and platforms. Protecting every attack surface with cloud-ready Zero Trust Privilege (ZTP) which secures access to infrastructure, DevOps, cloud, containers, Big Data, and the entire development and production environment is needed.

Zero Trust Privilege can harden healthcare and medical device manufacturers’ internal security, only granting least privilege access based on verifying who is requesting access, the context of the request, and the risk of the access environment. By implementing least privilege access, healthcare and medical device manufacturers would be able to minimize attack surfaces, improve audit and compliance visibility, and reduces risk, complexity, and costs across their development and production operations.

The Best Security Test Of All: An FDA Audit

Regulatory agencies across Asia, Europe, and North America are placing a higher priority than ever before on cybersecurity to the device level. The U.S. Food & Drug Administration’s Cybersecurity Initiative is one of the most comprehensive, providing prescriptive guidance to manufacturers on how to attain higher levels of cybersecurity in their products.

During a recent healthcare device and medical device manufacturer’s conference, a former FDA auditor (and now Vice President of Compliance) gave a fascinating keynote on the FDA’s intent to audit medical device security at the production level. Security had been an afterthought or at best a “trust but verify” approach that relied on trusted versus untrusted machine domains. That will no longer be the case, as the FDA will now complete audits that are comparable to Zero Trust across manufacturing operations and devices.

As Zero Trust Privilege enables greater auditability than has been possible in the past, combined with a “never trust, always verify” approach to system access, healthcare device, and medical products manufacturers should start engineering in Zero Trust into their development cycles now.

The Current State Of Cybersecurity Shows Now Is The Time For Zero Trust

  • 41% of total breaches in 2017 targeted the healthcare industry, making it the most popular target for breach attempts.
  • Personally Identifiable Information (PII) combined with user credentials tops the percentage of breaches with 29% according to Wipro’s report.
  • 88 records were lost or stolen every second in 2017 according to Wipro’s analysis.
  • Machine learning & AI are the second highest ranking security competencies for the future.

These and many other fascinating findings are from Wipro’s State of Cybersecurity Report 2018. A copy of the report can be downloaded here (PDF, 96 pp., no opt-in). The study is based on four primary sources of data including primary research of Wipro customers, Cyber Defense Center (CDC) primary research, secondary research sources and Wipro partner content. 42% of respondents are from North America, 10% from Europe, 18% from the Middle East, 21% from Asia and 8% from Australia. For additional details on the methodology, please see pages 3 through 5 of the report.

Banking & Financial Services and Healthcare Breaches Most Common

Over 40% of all breaches Wipro was able to track using their CDCs are targeted at healthcare, followed by banking & financial services with 18%. This is consistent with Verizon’s 2018 Data Breach Investigations Report which shows healthcare leading all industries with five times the number of breaches experienced than any other industry. Banking & financial services receive more server-based breach incidents than any other industry according to Verizon’s latest study. Accenture’s study, “Losing the Cyber Culture War in Healthcare: Accenture 2018 Healthcare Workforce Survey on Cybersecurity” found that 18% of healthcare employees are willing to sell confidential data to unauthorized parties for as little as $500 to $1,000.

Wipro’s State of Cybersecurity Report 2018 underscores how all industries are facing a security crisis today. The study shows how all industries need a more scalable approach to security that protects every attack surface by validating every access request on every device, for every resource.  Zero Trust Security (ZTS) continues to be proven effective in thwarting breach attempts across all industries by relying on its four core pillars of verifying the identity of every user, validating every device, limiting access and privilege, as well as relying on machine learning to analyze user behavior and gain greater insights from analytics. Leaders in this field include Centrify for Privileged Access Management, Idaptive, (a new company soon to be spun out from Centrify) for Next-Gen Access, as well as CiscoF5 and Palo Alto Networks in networking.

ZTS starts by maturing an organization’s identity management practices ― be it to secure end-user access credentials through Next-Gen Access (NGA) or to secure privileged user credentials via Zero Trust Privilege (ZTP). NGA empowers organizations to validate every end user access attempt by capturing and then analyzing a wide breadth of data, including user identity, device, device operating system, location, time, resource request, and many other factors to derive risk scores. NGA determines in less than a second if verified end users will get immediate access to resources requested, or be asked to verify their identity further through Multi-Factor Authentication (MFA). Zero Trust Privilege is focused on privileged users that typically hold the “keys to the kingdom” and therefore are a common target for cyber adversaries. ZTP grants least privilege access based on verifying who is requesting access, the context of the request, and the risk of the access environment. By implementing least privilege access, organizations minimize attack surfaces, improving audit and compliance visibility, and reducing risk, complexity, and costs for the modern, hybrid enterprise. Every industry needs Zero Trust Security to secure the proliferating number and variety of attack surfaces and realize that each customer, employee and partner identity is their real security perimeter.

Key takeaways of the Wipro State of Cybersecurity Report 2018 include the following:

  • Security Architecture & Design and Machine learning & AI are the #1 and #2 ranked security competencies for the future. When senior executive respondents were asked which security competencies would most help security practitioners excel in the cybersecurity domain, they mentioned security architecture & design (31%) and machine learning & AI (19%) as their top choices. Next-Gen Access platforms leverage machine learning algorithms to continuously learn and generate contextual intelligence that is used to streamline access for verified end users while thwarting breach attempts, the most common of which is compromised credentials. Please click on the graphic to expand it for easier reading.

  • 29% of respondents say that Privileged Access Management (PAM) gave them most value, further validating now is the time for Zero Trust Privilege. IT executives are more and more understanding that privileged access credential abuse is the most common cause for cyber-attacks and therefore are starting to place more emphasis on implementing Privileged Access Management. Centrify has recently announced a new focus on Zero Trust Privilege, extending PAM to a broader modern threatscape including DevOps, containers, Big Data and more. Please click on the graphic to expand it for easier reading.

  • Endpoint attack vectors are proliferating faster than traditional enterprise security approaches can keep up. The scale and scope of endpoint attack vectors continue to change quickly. Wipro found that breach attempts are often multi-dimensional with orchestrated attempts to compromise a combination of attack vectors at once. Wipro’s findings that endpoint attack vectors are fluctuating so quickly further support the need for ZTS enabled by Next-Gen Access as the primary security strategy to thwart breach attempts. Please click on the graphic to expand it for easier reading.

Conclusion

In quantifying the number and scope of breaches healthcare, banking & financial services, retail, education and manufacturing companies experienced in 2017, Wipro’s latest Wipro State of Cybersecurity Report shows how every identity is the new security perimeter of a business. Attack surfaces are proliferating with the growth of business models in each of these industries, accelerated by the Internet of Things (IoT) adoption and smart, connected products and systems. By relying on the four core pillars of verifying the identity of every user, validating every device, limiting access and privilege, as well as relying on machine learning to analyze user behavior and gain greater insights from analytics, Zero Trust Security thwarts breach attempts by protecting every threat surface in real-time.

2018 Roundup Of Cloud Computing Forecasts And Market Estimates

Cloud computing platforms and applications are proliferating across enterprises today, serving as the IT infrastructure driving new digital businesses. The following roundup of cloud computing forecasts and market estimates reflect a maturing global market for cloud services, with proven scale, speed and security to support new business models.

CIOs who are creating compelling business cases that rely on cloud platforms as a growth catalyst is the architects enabling these new business initiatives to succeed. The era of CIO strategist has arrived. Key takeaways include the following:

  • Amazon Web Services (AWS) accounted for 55% of the company’s operating profit in Q2, 2018, despite contributing only 12% to the company’s net sales. In Q1, 2018 services accounted for 40% of Amazon’s revenue, up from 26% three years earlier. Source: Cloud Business Drives Amazon’s Profits, Statista, July 27, 2018.

  • 80% of enterprises are both running apps on or experimenting with Amazon Web Services (AWS) as their preferred cloud platform. 67% of enterprises are running apps on (45%) and experimenting on (22%) the Microsoft Azure platform. 18% of enterprises are using Google’s Cloud Platform for applications today, with 23% evaluating the platform for future use. RightScale’s 2018 survey was included in the original data set Statista used to create the comparison. Source: Statista, Current and planned usage of public cloud platform services running applications worldwide in 2018. Please click on the graphic to expand for easier viewing.

  • Enterprise adoption of Microsoft Azure increased significantly from 43% to 58% attaining a 35% CAGR while AWS adoption increased from 59% to 68%. Enterprise respondents with future projects (the combination of experimenting and planning to use) show the most interest in Google (41%). Source: RightScale 2018 State of the Cloud Report. Please click on the graphic to expand for easier viewing.

  • Wikibon projects the True Private Cloud (TPC) worldwide market will experience a compound annual growth rate of 29.2%, reaching $262.4B by 2027. The firm predicts TPC growth will far outpace the infrastructure-as-a-service (IaaS) growth of 15.2% over the same period. A true private cloud is distinguished from a private cloud by the completeness of the integration of all aspects of the offering, including performance characteristics such as price, agility, and service breadth. Please see the source link for additional details on TPC. Source: Wikibon’s 2018 True Private Cloud Forecast and Market Shares. Please click on the graphic to expand for easier viewing.

  • Quality Control, Computer-Aided Engineering, and Manufacturing Execution Systems (MES) are the three most widely adopted systems in the cloud by discrete and process The survey also found that 60% of discrete and process manufacturers say their end users prefer the cloud over on-premise. Source: Amazon Web Services & IDC: Industrial Customers Are Ready For The Cloud – Now (PDF, 13 pp., no opt-in, sponsored by AWS). Please click on the graphic to expand for easier viewing.

  • The Worldwide Public Cloud Services Market is projected to grow by 17.3 3% in 2019 to total $206.2B, up from $175.8B in 2018 according to Gartner. In 2018 the market will grow a healthy 21% up from $145.3B in 2017 according to the research and advisory firm. Infrastructure-as-a-Service (IaaS) will be the fastest-growing segment of the market, forecasted to grow by 27.6% in 2019 to reach $39.5B, up from $31B in 2018. By 2022, Gartner expects that 90% of enterprises purchasing public cloud IaaS will do so from an integrated IaaS and Platform-as-a-Service (PaaS), and will use both the IaaS and PaaS capabilities from that provider. Source: Gartner Forecasts Worldwide Public Cloud Revenue to Grow 17.3 Percent in 2019.

  • More than $1.3T in IT spending will be directly or indirectly affected by the shift to cloud by 2022. 28% of spending within key enterprise IT markets will shift to the cloud by 2022, up from 19% in 2018. The largest cloud shift before 2018 occurred in application software, particularly driven by customer relationship management (CRM) software, with Salesforce dominating as the market leader. CRM has already reached a tipping point where a higher proportion of spending occurs in the cloud than in traditional software. Source: Gartner Says 28 Percent of Spending in Key IT Segments Will Shift to the Cloud by 2022.

  • IDC predicts worldwide Public Cloud Services Spending will reach $180B in 2018, an increase of 23.7% over 2017. According to IDC, the market is expected to achieve a five-year compound annual growth rate (CAGR) of 21.9% with public cloud services spending totaling $277B in 2021. The industries that are forecast to spend the most on public cloud services in 2018 are discrete manufacturing ($19.7B), professional services ($18.1B), and banking ($16.7B). The process manufacturing and retail industries are also expected to spend more than $10B each on public cloud services in 2018. These five industries will remain at the top in 2021 due to their continued investment in public cloud solutions. The industries that will see the fastest spending growth over the five-year forecast period are professional services (24.4% CAGR), telecom (23.3% CAGR), and banking (23.0% CAGR). Source: Worldwide Public Cloud Services Spending Forecast to Reach $160 Billion This Year, According to IDC.
  • Discrete Manufacturing is predicted to lead all industries on public cloud spending of $19.7B in 2018 according to IDC. Additional industries forecast to spend the most on public cloud services this year include Professional Services at $18.1B and Banking at $16.7B. The process manufacturing and retail industries are also expected to spend more than $10B each on public cloud services in 2018. According to IDC, these five industries will remain at the top in 2021 due to their continued investment in public cloud solutions. The industries that will see the fastest spending growth over the five-year forecast period are Professional Services with a 24.4% CAGR, Telecommunications with a 23.3% CAGR, and banking with a 23% CAGR. Source: Worldwide Public Cloud Services Spending Forecast to Reach $160 Billion This Year, According to IDC.

Additional Resources:

How AI & Machine Learning Are Redefining The War For Talent

These and many other fascinating insights are from Gartner’s recent research note, Cool Vendors in Human Capital Management for Talent Acquisition (PDF, 13 pp., client access reqd.) that illustrates how AI and machine learning are fundamentally redefining the war for talent. Gartner selected five companies that are setting a rapid pace of innovation in talent management, taking on Human Capital Management’s (HCM) most complex challenges. The five vendors Gartner mentions in the research note are AllyO, Eightfold, jobpal, Knack, and Vettd. Each has concentrated on creating and launching differentiated applications that address urgent needs enterprises have across the talent acquisition landscape. Gartner’s interpretation of the expanding Talent Acquisition Landscape is shown below (please click on the graphic to expand):

Source: Gartner, Cool Vendors in Human Capital Management for Talent Acquisition, Written by Jason Cerrato, Jeff Freyermuth, John Kostoulas, Helen Poitevin, Ron Hanscome. 7 September 2018

Company Growth Plans Are Accelerating The War For Talent

The average employee’s tenure at a cloud-based enterprise software company is 19 months; in the Silicon Valley, this trends to 14 months due to intense competition for talent according to C-level executives leading these companies. Fast-growing enterprise cloud computing companies and many other businesses like them need specific capabilities, skill sets, and associates who know how to unlearn old concepts and learn new ones. Today across tech and many other industries, every company’s growth strategy is predicated on how well they attract, engage, screen, interview, select and manage talent over associates’ lifecycles.

Of the five companies Gartner names as Cool Vendors in the field of Human Capital Management for Talent Acquisition, Eightfold is the only one achieving personalization at scale today. Attaining personalization at scale is essential if any growing business is going to succeed in attracting, acquiring and growing talent that can support their growth goals and strategies. Eightfold’s approach makes it possible to scale personalized responses to specific candidates in a company’s candidate community while defining the ideal candidate for each open position.

Gartner finds Eightfold noteworthy for its AI-based Talent Intelligence Platform that combines analysis of publicly available data, internal data repositories, HCM systems, ATS tools, and spreadsheets then creates ontologies based on organization-specific success criteria. Each ontology, or area of talent management interest, is customizable for further queries using the app’s easily understood and navigated user interface. Gartner also finds that Eightfold.ai is one of the first examples of a self-updating corporate candidate database. Profiles in the system are now continually updated using external data gathering, without applicants reapplying or submitting updated profiles. The Eightfold.ai Talent Intelligence Platform is shown below:

Taking A Data-Driven Approach to Improve Diversity

AI and machine learning have the potential to remove conscious and unconscious biases from hiring decisions, leading to hiring decisions based on capabilities and innate skills. Many CEOs and senior management teams are enthusiastically endorsing diversity programs yet struggling to make progress. AI and machine learning-based approaches like Eightfold’s can help to accelerate them to their diversity goals and attain a more egalitarian workplace. Data is the great equalizer, with a proven ability to eradicate conscious and unconscious biases from hiring decisions and enable true diversity by equally evaluating candidates based on their experience, growth potential and strengths.

Conclusion

At the center of every growing business’ growth plans is the need to attract, engage, recruit, and retain the highest quality employees possible. As future research in the field of HCM will show, the field is in crisis because it’s relying more on biases than solid data. Breaking through the barrier of conscious and unconscious biases will provide contextual intelligence of an applicant’s unique skills, capabilities and growth trajectories that are far beyond the scope of any resume or what an ATS can provide. The war for talent is being won today with data and insights that strip away biases to provide prospects who are ready for the challenges of helping their hiring companies grow.

58% Of All Healthcare Breaches Are Initiated By Insiders

  • 58% of healthcare systems breach attempts involve inside actors, which makes this the leading industry for insider threats today.
  • Ransomware leads all malicious code categories, responsible for 70% of breach attempt incidents.
  • Stealing laptops from medical professionals’ cars to obtain privileged access credentials to gain access and install malware on healthcare networks, exfiltrate valuable data or sabotage systems and applications are all common breach strategies.

These and many other fascinating insights are from Verizon’s 2018 Protected Health Information Data Breach Report (PHIDBR). A copy of the study is available for download here (PDF, 20 pp., no opt-in).  The study is based on 1,368 incidents across 27 countries. Healthcare medical records were the focus of breaches, and the data victims were patients and their medical histories, treatment plans, and identities. The data comprising the report is a subset of Verizon’s Annual Data Breach Investigations Report (DBIR) and spans 2016 and 2017.

Why Healthcare Needs Zero Trust Security To Grow

One of the most compelling insights from the Verizon PHIDBR study is how quickly healthcare is becoming a digitally driven business with strong growth potential. What’s holding its growth back, however, is how porous healthcare digital security is. 66% of internal and external actors are abusing privileged access credentials to access databases and exfiltrate proprietary information, and 58% of breach attempts involve internal actors.

Solving the security challenges healthcare providers face is going to fuel faster growth. Digitally-enabled healthcare providers and fast-growing digital businesses in other industries are standardizing on Zero Trust Security (ZTS), which aims to protect every internal and external endpoint and attack surface. ZTS is based on four pillars, which include verifying the identity of every user, validating every device, limiting access and privilege, and learning and adapting using machine learning to analyze user behavior and gain greater insights from analytics.

Identities Need to Be Every Healthcare Providers’ New Security Perimeter

ZTS starts by defining a digital business’ security perimeter as every employees’ and patients’ identity, regardless of their location. Every login attempt, resource request, device operating system, and many other variables are analyzed using machine learning algorithms in real time to produce a risk score, which is used to empower Next-Gen Access (NGA).

The higher the risk score, the more authentication is required before providing access. Multi-Factor Authentication (MFA) is required first, and if a login attempt doesn’t pass, additional screening is requested up to shutting off an account’s access.

NGA is proving to be an effective strategy for thwarting stolen and sold healthcare provider’s privileged access credentials from gaining access to networks and systems, combining Identity-as-a-Service (IDaaS), Enterprise Mobility Management (EMM) and Privileged Access Management (PAM). Centrify is one of the leaders in this field, with expertise in the healthcare industry.

NGA can also assure healthcare providers’ privileged access credentials don’t make the best seller list on the Dark Web. Another recent study from Accenture titled, “Losing the Cyber Culture War in Healthcare: Accenture 2018 Healthcare Workforce Survey on Cybersecurity” found that 18% of healthcare employees are willing to sell confidential data to unauthorized parties for as little as $500 to $1,000. 24% of employees know of someone who has sold privileged credentials to outsiders, according to the survey. By verifying every login attempt from any location, NGA can thwart the many privilege access credentials for sale on the Dark Web.

The following are the key takeaways from Verizon’s 2018 Protected Health Information Data Breach Report (PHIDBR):

  • 58% of healthcare security breach attempts involve inside actors, which makes it the leading industry for insider threats today. External actors are attempting 42% of healthcare breaches. Inside actors rely on their privileged access credentials or steal them from fellow employees to launch breaches the majority of the time. By utilizing NGA, healthcare providers can get this epidemic of internal security breaches under control by forcing verification for every access request, anywhere, on a 24/7 basis.

  • Most healthcare breaches are motivated by financial gain, with healthcare workers most often using patient data to commit tax return and credit fraud. Verizon found 876 total breach incidents initiated by healthcare insiders in 2017, leading all categories. External actors initiated 523 breach incidents, while partners initiated 109 breach incidents. 496 of all breach attempts are motivated by financial gain across internal, external and partner actors. Internal actors are known for attempting breaches for fun and curiosity-driven by interest in celebrities’ health histories that are accessible from the systems they use daily. When internal actors are collaborating with external actors and partners for financial gain and accessing confidential health records of patients, it’s time for healthcare providers to take a more aggressive stance on securing patient records with a Zero Trust approach.

  • Abusing privileged access credentials (66%) and abusing credentials and physical access points (17%) to gain unauthorized access comprise 82.9% of all misuse-based breach attempts and incidents. Verizon’s study accentuates that misuse of credentials and the breaching of physical access points with little or no security is intentional, deliberate and driven by financial gain the majority of the time. Internal, external and partner actors acting alone or in collaboration with each other know the easiest attack surface to exploit are accessed credentials, with database access being the goal half of the time. When there’s little to no protection on web application and payment card access points to a network, breaches happen. Shutting down privilege abuse starts with a solid ZTS strategy based on NGA where every login attempt is verified before access is granted and anomalies trigger MFA and further user validation. Please click on the graphic to expand it for easier reading.

  • 70.2% of all hacking attempts are based on stolen privileged access credentials (49.3%) combined with brute force to obtain credentials from POS terminals and controllers (20.9%). Hackers devise ingenious ways of stealing privileged access credentials, even resorting to hacking a POS terminal or controllers to get them. Healthcare insiders also steal credentials to gain access to mainframes, servers, databases and internal systems. Verizon’s findings below are supported by Accenture’s research showing that 18% of healthcare employees are willing to sell privileged access credentials and confidential data to unauthorized parties for as little as $500 to $1,000. Please click on the graphic to expand it for easier reading.

  • Hospitals are most often targeted for breaches using privileged access credentials followed by ambulatory health care services, the latter of which is seen as the most penetrable business via hacking and brute force credential acquisition. Verizon compared breach incidents by North American Industry Classification System (NAICS) and found privileged credential misuse is flourishing in hospitals where inside and outside actors seek to access databases and web applications. Internal, external and partner actors are concentrating on hospitals due to the massive scale of sensitive data they can attain with stolen privileged access credentials and quickly sell them or profit from them through fraudulent means. Verizon also says a favorite hacking strategy is to use USB drives to exfiltrate proprietary information and sell it to health professionals intent on launching competing clinics and practices. Please click on the graphic to expand it for easier reading.

Conclusion

With the same intensity they invest in returning patients to health, healthcare providers need to strengthen their digital security, and Zero Trust Security is the best place to start. ZTS begins with Next-Gen Access by not trusting a single device, login attempt, or privileged access credential for every attack surface protected. Every device’s login attempt, resource request, and access credentials are verified through NGA, thwarting the rampant misuse and hacking based on comprised privileged access credentials. The bottom line is, it’s time for healthcare providers to get in better security shape by adopting a Zero Trust approach.

Identities Are The New Security Perimeter

  • Privileged credentials for accessing an airport’s security system were recently for sale on the Dark Web for just $10, according to McAfee.
  • 18% of healthcare employees are willing to sell confidential data to unauthorized parties for as little as $500 to $1,000, and 24% of employees know of someone who has sold privileged credentials to outsiders, according to a recent Accenture survey.
  • Apple employees in Ireland have been offered as much as €20,000 ($22,878) in exchange for their privilege access credentials in 2016, according to Business Insider.
  • Privileged access credentials belonging to more than 1 million staff at a top UK law firm have been found for sale on the Dark Web.

There’s been a 135% year-over-year increase in financial data for sale on the Dark Web between the first half of 2017 and the first half of 2018. The Dark Web is now solidly established as a globally-based trading marketplace for a myriad of privileged credentials including access procedures with keywords, and corporate logins and passwords where transactions happen between anonymous buyers and sellers. It’s also the online marketplace of choice where disgruntled, angry employees turn to for revenge against employers. An employee at Honeywell, angry over not getting a raise, used the Dark Web as an intermediary to sell DEA satellite tracking system data he accessed from unauthorized accounts he created to Mexican drug cartels for $2M. He was caught in a sting operation, the breach was thwarted, and he was arrested.

Your Most Vulnerable Threat Surface Is A Best Seller

Sites on the Dark Web offer lucrative payment in bitcoin and other anonymous currencies for administrators’ accounts at leading European, UK and North American banking institutions and corporations. Employees are offering their privileged credentials for sale to the highest bidder out of anger, revenge or for financial gain anonymously from online auction sites.

Privileged access credentials are a best-seller because they provide the intruder with “the keys to the kingdom.” By leveraging a “trusted” identity, a hacker can operate undetected and exfiltrate sensitive data sets without raising any red flags. This holds especially true when the organizations are not applying multi-factor authentication (MFA) or risk-based access controls to limit any type of lateral movement after unauthorized access. Without these security measures in place, hackers can quickly access any digital businesses’ most valuable systems to exfiltrate valuable data or sabotage systems and applications.

81% of all hacking-related breaches leverage either stolen and weak passwords, according to Verizon’s 2017 Data Breach Investigations Report. A recent study by Centrify and Dow Jones Customer Intelligence titled, CEO Disconnect is Weakening Cybersecurity (31 pp, PDF, opt-in), found that CEOs can reduce the risk of a security breach by rethinking their Identity and Access Management (IAM) strategies. 68% of executives whose companies experienced significant breaches in hindsight believe that the breach could have been prevented by implementing more mature identity and access management strategies.

In A Zero Trust World, Identities Are The New Security Perimeter

The buying and selling of privileged credentials are proliferating on the Dark Web today and will exponentially increase in the years to come. Digital businesses need to realize that dated concepts of trusted and untrusted domains have been rendered ineffective. Teams of hackers aren’t breaking into secured systems; they’re logging in.

Digital businesses who are effective in thwarting privileged credential access have standardized on Zero Trust Security (ZTS) to ensure every potentially compromised endpoint, and threat surface within and outside a company is protected. Not a single device, login attempt, resource requested or other user-based actions are trusted, they are verified through Next-Gen Access (NGA).

Zero Trust Security relies upon four pillars: real-time user verification, device validation, access and privilege limitation, while also learning and adapting to verified user behaviors. Leaders in this area such as Centrify are relying on machine learning technology to calculate risk scores based on a wide spectrum of variables that quantitatively define every access attempt, including device, operating system, location, time of day, and several other key factors.

Depending on their risk scores, users are asked to validate their true identity through MFA further. If there are too many login attempts, risk scores increase quickly, and the NGA platform will automatically block and disable an account. All this happens in seconds and is running on a 24/7 basis ― monitoring every attempted login from anywhere in the world.

A recent Forrester Research thought leadership paper titled, Adopt Next-Gen Access to Power Your Zero Trust Strategy (14 pp., PDF, opt-in), provides insights into how NGA enables ZTS to scale across enterprises, protecting every endpoint and threat surface. The study found 32% of enterprises are excelling at the four ZTS pillars of verifying the identity of every user, validating every device using Mobile Data Management (MDM) and Mobile App Management (MAM), limiting access and privileges and learning and adapting using machine learning to analyze user behavior and gain greater insights from analytics.

NGA is a proven strategy for thwarting stolen and sold privileged access credentials from gaining access to a digital business’ network and systems, combining Identity-as-a-Service, Enterprise Mobility Management (EMM) and Privileged Access Management (PAM). Forrester found that scalable Zero Trust Security strategies empowered by NGA lead to increased organization-wide productivity (71%), reduced overall risk (70%) and reduced cost on compliance initiatives (70%).

Additionally, insights gained from user behavior through machine learning allow for greater efficiency — both on reduced compliance (31% more confident) and overall security costs (40% more likely to be confident), as well through increased productivity for the organization (8% more likely to be confident). The following graphic from the study ranks respondents’ answers.

Conclusion

Making sure your company’s privileged access credentials don’t make the best seller list on the Dark Web starts with a strong, scalable ZTS strategy driven by NGA. Next-Gen Access continually learns the behaviors of verified users, solving a long-standing paradox of user experience in security and access management. However, every digital business needs to focus on how the four pillars of Zero Trust Security apply to them and how they can take a pragmatic, thorough approach to secure every threat surface they have.

%d bloggers like this: