Overview:
Cyber resilience requires continuous readiness, not just prevention, detection and recovery after an attack.
AI is lowering the skills and costs needed to launch cyberattacks, making faster AI-powered defense essential.
Boards, security teams and employees must share responsibility for protecting business operations and customer trust.
Complete prevention is no longer possible in a world of rising attacks. A survey of 329 senior executives across the UK, Germany, France, Italy and Spain found that almost 70% agree. They said stopping all cyber disruption is no longer realistic. Narrow security tools are not enough anymore.
In this latest episode of Analytics Insight Conversations, host Priya Dayalani speaks with Ganesh Iyer, Managing Director, India and SAARC at Trellix. The two discuss why cyber resilience must go beyond recovery.
Could you tell our listeners about Trellix and your role there?
Trellix is a global leader in cybersecurity resilience built on threat intelligence. We help some of the world's most security-conscious organizations protect their data, systems and operations.
Our team brings over 30 years of threat intelligence experience. Our research center tracks more than 5,500 threat campaigns and over 500 threat groups. India is central to our work. About 70% of our engineering team and 45% of our employees are based here. I connect our regional plan with customer needs and new threats.
Why is the traditional prevent, detect and recover approach no longer enough?
All three steps still matter. The problem is that attacks do not wait for teams to act one step at a time. Our research shows a 67% rise in AI-driven advanced persistent threat attacks.
Monthly attack frequency has grown by almost 300%. Restoring a server to its last good version does not undo the damage. Once data is stolen, it is gone. It is like bolting the gate after the horse has left. Resilience means stopping an attack early.
How is AI changing the way attackers work?
AI is a neutral tool, and the result depends on who uses it. Our researchers found a dark web service selling advanced attack kits for about $100 a month.
A person with limited coding skills can now launch a serious attack. I call this capability compression. Attackers need less skill, fewer tools and less time. Defenders must use AI as well. Trellix's AI has helped customers bring average detection time from over an hour to under 11 minutes.
Who should own cyber resilience inside an organization?
No single person can own it. I compare it to personal health, which covers the body, the mind and finances. A breach hurts revenue, customers, brand, employees and regulatory standing.
The board can set risk appetite and invest wisely. Still, every employee must know their role. Around 2010, Indian companies built disaster recovery sites and practiced drills. Cyber readiness now needs the same practice.
A World Economic Forum survey also found that resilience improves when ownership spreads across functions.
What is the one mindset shift every enterprise should make?
Recovery is not a strategy. Recovery returns a business to its last known good state. By then, part of the kingdom's keys is already lost. Prevention and recovery remain essential parts of a larger model. Resilience helps an organization resist disruption every single day.
Any final thoughts for our listeners?
Build resilience before an incident happens. Make sure every person knows what to do and what not to do. Thank you for having me.