In 2025, CISO priorities include cost optimization, such as consolidating and rationalizing infosec tools to reduce excessive expenditure and increase productivity.
Companies are advised to consolidate their tech stack under a single-vendor approach or select the best tool in each category, ensuring API integration capabilities.
Stack consolidation often involves automation, leading to cost savings and improved security, with companies achieving average savings of 16% and analyst time savings of 20%.
Automation projects in infosec processes, including selective incident response automation and risk assessment, help save analyst time and mitigate talent shortage.
Generative AI tools are being prioritized by many companies for future competitiveness, while establishing standards and training programs is crucial to manage associated risks.
Implementing open-source AI solutions can reduce operational costs and enhance data protection, though the availability of suitable models is case-dependent.
Meaningful infosec metrics simplify justifying infosec budgets to the board of directors, focusing on risk reduction, organizational readiness for attacks, and effectiveness of measures.
Prioritizing identity management, including multi-factor authentication and passkey-based solutions, can significantly reduce the risk of compromise through credential theft.
Centralized management of machine identities and secrets, along with strategic implementation of tools, helps in enhancing security in cloud environments.
Effective cost management in security operations centers (SOCs), such as through hierarchical data storage and distributed processing infrastructure, can lead to significant savings.