Companies will need to strengthen cybersecurity controls, improve monitoring and respond faster to potential threats as artificial intelligence (AI) makes it easier to identify and exploit software vulnerabilities, according to experts from Grant Thornton Bharat and KPMG in India.

The comments come amid concerns over a certificate-related security incident at eMudhra. The company said its global website certificate business was affected, while its India-regulated digital signature certificate and e-sign businesses remained unaffected.

AI is changing the cybersecurity landscape by making it easier to identify flaws across complex software systems. It can also help connect vulnerabilities that may not appear related, increasing the chances of a security compromise.

Kunal Pande, National Leader – Cyber, Risk and Compliance Services at KPMG in India said, “What is needed for an organisation is to make sure that the process and the capability to make sure that such flaws are first of all prevented, is really taken to a better level, wherein more automation and tech capabilities also are brought in. As well as there are capabilities built in that in case something is detected, it is contained and rectified at the earliest possible.”

This will require greater use of automation, technology-led monitoring and stronger governance frameworks. While preventive controls can reduce the likelihood of an attack, detective controls can help identify unusual activity and limit the damage if a breach occurs.

Even a single weakness in an organisation's software, processes or people-related controls can create an opportunity for attackers. Companies will therefore need to review their security frameworks regularly rather than rely solely on existing safeguards.

Source link