The challenges being faced are significant. More dispersed workforces and increasing use of cloud-based resources mean traditional approaches to security are no longer fully effective. New strategies are needed that ensure both staff and business resources remain protected from attacks.

As 2023 unfolds, some of the predicted trends to watch across the APAC region in the cybersecurity space include:

• Supply-chain attacks will be a big threat for businesses using open-source software:
  Increasing numbers of organisations have adopted open-source software in recent years and this is resulting in heightened security concerns. Unfortunately, these organisations are likely to be perceived as prime targets for cyberattacks against supply chains.
  
  During 2023, attackers will continue to become more strategic when it comes to exploiting open-source software. They will examine code and its components to obtain a thorough understanding of any flaws that exist and how best they can be exploited.
  
  Flaws arise because developers use libraries, executable code, and code snippets to complete their software products. If those elements are compromised and malicious code is introduced, the end product becomes a vector for cybercriminals to gain access to an organisation’s IT infrastructure.
• Smaller security budgets will leave businesses exposed to attacks:
  As economic storm clouds darken during the coming year, many organisations will be looking for ways to trim expenses. However, those tempted to make cuts to their IT security budgets could be in for a nasty surprise.
  
  Cyberthreats will continue to evolve as criminals strive to strengthen their attack tactics during uncertain times. For this reason, it is vital that organisations scope out proactive security strategies and adopt frontline prevention and detection technologies.
• Cybersecurity awareness efforts will pay dividends:
  In the wake of a wave of social engineering-based security attacks during 2022, many organisations will invest more in employee training programs. Staff play an important role in the fight against cyberattacks and they need to understand what to watch out for and how to respond. Expect to see an increase in demand for security education throughout the year.
• Security standards will improve:
  During 2023, the United States Department of Commerce will partner with the ASEAN Consultative Committee on Standards and Quality (ACCSQ) to co-develop programs designed to strengthen ASEAN’s digital trade ecosystem.
  
  Meanwhile, a research team from Nanyang Technological University Singapore, together with AI industry leaders, has created a new standard for AI security¹. This was done in response to the demand for securing the integrity of AI-based solutions. During the coming year more initiatives such as these will be undertaken.
• Subscription security services will gain in popularity:
  Organisations will increasingly turn to subscription-based and managed security services during 2023. Many find this more cost effective than purchasing and managing their own infrastructure.
  
  The shift will be spurred by ongoing economic uncertainty and a drive to reduce spending. Indeed, it has been predicted that almost half of the APAC region’s cybersecurity market will be driven by managed security services by the end of the year.²
• IT security skills shortages will remain:
  The shortage of skilled IT security staff that has plagued organisations throughout 2022 will continue in 2023. Indeed, industry research³ shows 60% of organisations in APAC reported a shortage in their cybersecurity workforce during the past 12 months.
  
  The challenge of finding sufficient security professionals will be made even more acute as global travel restrictions are relaxed as this could see many people seek work in other parts of the world. Businesses in this region will not only have to find ways to attract cybersecurity talent, but also nurture their existing cybersecurity teams.

These themes will shape IT security throughout the coming year with organisations striving to bolster their protective measures amid constrained budgets and smaller workforces. Across organisations of all sizes, IT teams will have to hit the ground running and maintain this pace throughout 2023.

¹  https://opengovasia.com/singapore-launches-landmark-standard-for-ai-security/

²  https://www.computerweekly.com/news/252474161/Managed-services-fuelling-APAC-security-market

³  https://www.zdnet.com/article/apac-faces-2-1m-shortage-in-cybersecurity-professionals/