Blogs & Opinions 13.02.2025

Ways to Proactively Tackle Network Security

AI and IoT promise much, but also introduce new risks

To secure modern networks, trust no one, improve visibility and enhance security awareness, argues Phil Swain.

As businesses continue to innovate, the focus has shifted beyond simple digitisation. They are increasingly reliant on artificial intelligence (AI) and the Internet of Things (IoT) to create more intelligent and adaptable networks. But with the emergence of new technologies comes new vulnerabilities and evolving cybersecurity challenges that must be proactively addressed.

Some 96% of CIOs recognise the network as a critical component of their security posture. But how can they manage growing complexity while mitigating cyber risk effectively? Consider the following:

1. Zero-trust security

A third (34%) of CIOs rank securing the network as their top priority. That’s why many are turning to advanced solutions like Zero Trust Network Access (ZTNA). Zero trust is a foundational security framework for a business’ entire network, and it differs from other security models because it assumes inherent distrust. Instead of relying on traditional firewalls or legacy security approaches like Network Access Control (NAC), ZTNA ensures that access to networks, applications and devices is tightly controlled. It works on the principle of “least privilege”, meaning users can only reach the data or systems they absolutely need, and only when they need them.

“Even the best systems have a critical weak spot – human error.”

By managing this within a single, unified solution, IT teams can streamline operations, improve visibility, and better protect IoT devices on the network. ZTNA is especially effective in hybrid work models or when multiple vendors need network access, as it ensures that every user and device is verified before gaining access, no matter where they are. This not only strengthens security, but also eliminates the complexity of multi-vendor setups, providing a more secure and manageable system for businesses.

2. Building a holistic security foundation

Organisations can’t protect what they can’t see. This is where AI can help by creating a baseline of “normal” network activity that can be used to help flag potential anomalies to the IT team. This means that even a small IT function can identify and respond to potential threats before they have a chance to impact the organisation.

Network mapping is also important to driving improved visibility. To simplify this process, many organisations are shifting to “platformisation” – a unified approach that integrates networking and security operations into a single system, enhanced by AI. Research reveals that 88% of CIOs prefer this integrated platform model for its ability to streamline operations and enhance security. Platformisation not only reduces complexity, but also ensures all components work together seamlessly, offering greater visibility and a stronger security posture.

3. Fostering a cybersecurity-aware culture

Even the best systems have a critical weak spot – human error. It’s why social engineering remains one of the most effective ways for attackers to bypass defences. Adversaries trick victims into sharing sensitive information by impersonating legitimate sources, which is why employee awareness and training are essential to corporate security. When the workforce is taught what to look for, it can become an asset to a organisation’s security posture instead of a liability.

Security by design

As businesses continue to modernise their network infrastructure, the need to follow security-by-design principles is key. By adopting technologies like ZTNA, improving network visibility and embracing platformisation, businesses can strengthen their security posture while simplifying IT operations.

AI must also become a critical part of any security strategy. After all, as cyber threats increasingly use AI to attack, it’s only right that businesses harness the technology defensively.

Phil Swain is the Chief Information Security Officer at Extreme Networks. He is responsible for implementing and leading the information security strategies for the global enterprise with nearly 3,000 employees spanning 80 countries. He brings more than 20 years of experience solving problems and facilitating organisational change across international teams that address cybersecurity, InfoSec risk, compliance, and infrastructure management. Prior to joining Extreme, Philip worked at electrical manufacturing company, ABB, for over 10 years.

Latest articles

Be an insider. Sign up now!