21St Parliamentary Intelligence-Security Forum – Cyber Threat Landscape: Criminal Organizations & Motivations, Current Threat Vectors and Government Regulations

Mr. Jeremy Meyers presented a risk-centric approach to cybersecurity, underscoring the importance of organizations prioritizing the comprehension of their critical risks prior to assessing individual vulnerabilities. He elucidated that cybercriminals exhibit a constant state of adaptation, employing evolving tactics such as phishing to exploit predictable targets. Consequently, anticipating attacks necessitates a proactive and intelligence-driven strategy. Meyers emphasized the significance of identifying key organizational functions, critical infrastructure, and operational technology, subsequently safeguarding them efficiently and economically. He referenced U.S. initiatives, including the 2021 National Defense Authorization Act and Executive Order 141, which enhance supply chain security by scrutinizing software origins, preventing unauthorized access, and defending against advanced persistent threats that infiltrate deeply into systems. Meyers advocated for extending beyond application-level defenses to address more profound system vulnerabilities and expressed cautious optimism that these legislative and technical measures can be generalized and effectively applied across other organizations and sectors.