While information-centric security practice is still the dominant responsibility of most security organizations today, it doesn’t take into account the increasing impact of technology use in other areas of business, both by the organization and by the supply chains that service them. As IT security requirements grow to encompass the “edge” of most organizations, broader cybersecurity needs grow to include cyber-physical needs, as well.

At Gartner IT Symposium/Xpo®, we explore the risks brought by the digital revolution and how to adapt your IT security requirements to encompass digital and cyber-physical needs. Through best practices in establishing and executing on a cybersecurity strategy, IT executives learn how to balance the benefits of digitalization with the new and emerging risks.

Below are answers to some of the most pressing security, risk and compliance questions as well as highlighted sessions at this year’s conference.

Q&A with Gartner expert Tom Scholtz, Distinguished VP Analyst, on security, risk and compliance

How have security, risk and compliance evolved since last year? Have you noticed any major changes in the market, strategy or technology?

Security and risk practices continue to evolve in line with digitalization. Technologies such as artificial intelligence (AI) and machine learning, robotic process automation and the Internet of Things (IoT) offer both new risks and new opportunities to security and risk leaders. From a cyber-risk perspective, acceptance of cloud computing has reached a tipping point as enterprises formalize their cloud security strategies.

What’s one of the biggest mistakes organizations make when it comes to security?

Some organizations still believe cybersecurity can be effectively addressed through technology alone. Furthermore, many organizations equate regulatory or standards compliance with effective cybersecurity.

Finish this sentence: If organizations don’t get their security, risk and compliance right, they will …

... not be able to either compete in their markets or deliver satisfactory services to their citizens.

Back to Top

Security, risk and compliance spotlight sessions from 2019

The Leadership Vision for Security and Risk Management — 2019 to 2020 Tom Scholtz, Distinguished VP Analyst

Improve Cybersecurity Through Better Customer Experience — Stewart Buchanan, VP Analyst

Security Organization Dynamics, 2020 — Tom Scholtz, Distinguished VP Analyst