Magazine menu Close Magazine menu

Business

Latest stories

cybersecurity champions

Cybersecurity champions could be your secret weapon in raising employee cyber-awareness

  • min read
    • Cyber incidents continue to rank as the top risk for Financial Services companies. With 57 percent of banking executives saying their primary cybersecurity concern is phishing attacks targeting employees,  cybersecurity needs to be everyone's business – not just the IT department's problem. A cyber-secure work culture will make businesses more resilient to threats. According to Forbes, business-reported cyberattacks keep rising each quarter. Meanwhile, "The cyber skills gap continues to widen, with 3.4 million vacancies for cyber pros globally this year, up from 2.7 million in 2021." Employee behavior is one of the biggest factors behind cybersecurity incidents. Change how your employees understand cybersecurity with a cyber-aware work culture, and you'll substantially reduce the risk of compromise. One way of raising cybersecurity awareness at work is through a cybersecurity champions program. Forbes reports phishing, malware-spiked emails, social engineering and compromised credentials account for nearly 30 percent of cyberattacks. As all these are linked with lack of employee cyber awareness, everyone getting up-to-speed on today's cyberattacks could prevent many attacks. Why cybersecurity champions change business culture Lena Smart, Chief Information Security Officer (CISO) for MongoDB, calls cybersecurity champions the "cheerleaders and supporters of security" across an organization. MongoDB is a database platform to build web and mobile applications. It powers everything from popular online game Fortnite to dating site eHarmony's real-time communication system. The company is headquartered in the US and has 2,000 employees globally. "We need to assure customers we're keeping our applications secure and we want to show our internal customers they're working in a secure environment," says Smart. MongoDB's cybersecurity champions program was one of Smart's first initiatives when she joined the company last year. A 20-year industry veteran, she implemented two similar programs in previous CISO roles at international electronic trading platform Tradeweb and another at New York Power Authority. Smart says security experts inside an organization may have a limited perspective because they're looking through a tight lens. Weaving security through software development Security champions schemes are adopted most in software development, particularly with the trend toward DevOps. DevOps means combining software development and IT operations teams and processes to speed up development. As the need grew to scale DevOps projects faster while minimizing software vulnerabilities, organizations looked for ways to embed security into the development process. They called the approach DevSecOps. "Security champions programs aim to build a better security culture and get DevOps to create secure software more reliably," says Dan Cornell, Chief Technology Officer (CTO) with US application security company Denim Group. Cornell is a big proponent of cybersecurity champions and has helped many organizations launch programs. He says their aims vary depending on the industry, regulatory environment and company culture. For DevOps, he says, champions make security knowledge more accessible to the development team. Having run successful security champions programs outside of software development, Smart says the rules are transferable. "There's no difference in how you set it up from one company to the next." The champions are colleagues from different roles, teams and departments. Smart particularly wants participants who don't have "security" in their job title or responsibility. "The champions want to learn and understand security and how they can help the company to be more secure," she says. At MongoDB, the program is voluntary and relatively informal. Champions are encouraged to attend monthly meetings with ideas for training and other things they want to do. Building cybersecurity culture from the bottom up While the C-Suite's involvement is crucial in setting the tone and providing resources, the real strength of a cybersecurity culture is in the entire workforce's commitment and enthusiasm. Robust protection against cyber threats means building a cybersecurity culture from the ground up. Within a good security culture, people engage with cybersecurity, leading to growing awareness which reduces business vulnerability to attack. When staff feel invested in the organization's security, they become its first line of defense. When you foster a sense of joint initiative, employees at all levels help build the culture and security becomes ingrained in their daily practices. UCL Department of Security and Crime Science lecturer, Ingolf Becker, says a security champions program works because it's a two-way street. "It promotes security at all levels, but it's also an opportunity for management to get feedback about what's happening on the ground." Smart says sometimes the best ideas for improving security comes from people who "don't live under the scrutiny of the CISO every day. It gives you, as the CISO, a view you wouldn't otherwise have." Champions making cybersecurity communication clearer Smart measures the success of a champions program by how much feedback she gets on initiatives and efforts. For example, a new data-retention policy for a communication app the company was using: "Data-retention policies can be disruptive. We wanted to make sure we were asking the right questions and giving the right information to those affected," she explains. She put the champions to work. They met as a group and reviewed the draft memo. The champions took it apart, discussing what could be improved, what needed more information, and so on. That input, she says, saved her security team a lot of angst. "We finessed what was going to be a disruptive piece of communication," she says. She knew it worked because emails came in thanking them for the clarity of the message. People appreciated the efforts put in by those outside the CISO's core team. How to implement a cybersecurity champion program Becker says security champions must not be security people. "They're employees who are 'one of us,'" he says. "I think most organizations could benefit from having this local expertise about what security means to an organization." He says at organizations he's worked with, the program was often organic – started by people or teams who took it upon themselves to promote security. In those instances, formalizing the program helps to provide training and resources to develop it. To start a program, Smart recommends CISOs get executive support. At MongoDB, she started by pitching the idea to her manager, the company's CTO. "He loved the idea," she says. "Support from the top is fundamental, or it won't be a success." You must also work out what kind of commitment participants need, based on how often the champions meet and other tasks they do. The next phase is to promote the program and recruit volunteers – an online survey is a good way. After pitching her idea to the CTO, Smart enrolled the company's communication experts to raise awareness, including the benefits of the program to the organization. When employees stepped forward, their supervisors had to sign off. Smart had conversations with the managers who were uncertain and explained how volunteering could fit around the employee's day-to-day role. "Because it's voluntary, some months you may have five people in the room and some months 20," Smart says. "Don't be disheartened if the numbers go down. They'll come up again." To grow the program, look for ways to promote the champions' work and impact. MongoDB includes "day in the life" stories about the champions in the company's security newsletter. Championing security helps develop careers Gartner says cybersecurity champions programs are a zero- or low-cost way to accelerate your security message. Some organizations may offer incentives, and in DevOps scenarios, being a champion may become a full-time role. At MongoDB, the champions aren't there for perks, but there are benefits. They learn things and serve as leaders to their peers. Smart, too, found an unexpected benefit: Two of the champions later joined her team. "They're now a bridge between the old and new ways of security," she says. Becker believes just about any organization could implement a cybersecurity champions program. But there's one caveat. "You must be willing to listen and change based on the input of champions," he says. Smart notes the champions share a common goal. "We're all trying to solve the same problem: Keeping the data safe and the bad actors out," she says. The program lets her talk to people she rarely speaks to about ways to improve security. "It's a linking of the groups and a linking of the minds," she says. If you want to improve your security culture – and are willing to listen to employees with diverse perspectives – a security champions program is a great way to bring about long-lasting change.
chatGPT cybersecurity regulation

With ChatGPT’s vast innovative potential, regulators must take care

  • min read
    • ChatGPT and other artificial intelligence (AI) chatbot applications are major technological milestones with far-reaching benefits for many industries. But with each advance comes unintended consequences. With ChatGPT in its fourth iteration, and its underlying technologies growing fast, it's time to take stock of the policy landscape to understand its implications. What is ChatGPT, and how are businesses using it? ChatGPT is an AI chatbot made by OpenAI. It uses natural language processing (NLP) to create human-like text responses. Users can ask ChatGPT almost anything and receive relatively natural-sounding responses. It can write outputs like programming code, social media posts, summarize complex topics or almost anything text. ChatGPT is an example of generative AI: Artificial intelligence that learns to generate original content like images, music and text by identifying underlying patterns in existing examples. "Its primary objective is to create interactive and realistic conversations with users, making it a powerful tool for chatbots, virtual assistants and customer support applications," says AWS Solutions Architect Ragu Kuppannan. Many top companies are using ChatGPT. For example, travel outlet Expedia wants customers to be able to book a holiday in a way that feels like having a chat with a travel agent. Microsoft, a major investor in OpenAI, says ChatGPT already powers its search engine, Bing, and plans to add it to Word and Excel. ChatGPT could be promising for any application where natural, conversational interaction between people and tech would be beneficial. Risks of ChatGPT Critiques of ChatGPT and other chatbot applications generally focus on its potential to disrupt human employment, produce incorrect information or poor practice in training algorithms to identify harmful content. The underlying cybersecurity risks get less attention. Kaspersky's specialist threat intelligence teams have identified three main risk areas. First, ChatGPT can provide advice, even detailed guides, to help prospective attackers plan and target victims. Second, it can develop code and even create entire coding projects for those with little knowledge of software development. While ChatGPT has restrictions and safeguards to avoid abuse, they're fairly easily bypassed. Third, ChatGPT produces convincing and accurate text that can be used in phishing or spearphishing. To some extent, these three areas represent theoretical risks or outlier scenarios that don't represent how people and businesses usually use ChatGPT. Policy perspective beyond risks Policy should aim to be technology-blind – taking a similar approach to all related technology that might emerge in the future, rather than creating a unique approach for one of today's concerns. It should build the best possible defenses against the worst human intentions and applications. Practically speaking, there may be no way to prevent or limit use of tech like ChatGPT. And to limit an emerging technology's potential means being left behind in a global digital economy. While policy discussions usually focus on outputs – the material ChatGPT produces – its inputs (the data it's trained with) may be a bigger threat. Data-driven tools like ChatGPT are only as good or accurate as their training datasets. As chatbot systems may become the most common way to use the internet, issues will have wide impact. Ensuring balance in training data is a growing challenge as disinformation expands. Bad actors can influence what users see and read in ways that have global consequences. Datasets, devices and systems must be secure and accurate. How nations are regulating AI In our public policy work, Kaspersky advocates public-private partnerships. We think partnerships combining global private-sector expertise with policymakers' local needs will be the best defense. It's a middle-ground approach that avoids too much or too little caution. These partnerships in cybersecurity maximize the advantages of emerging technologies like ChatGPT, while safeguarding against risks. United Arab Emirates (UAE) is a role model for inclusive public-private partnerships. They've taken a progressive and collaborative stance on partnerships with international tech firms. Initiatives and forums like the Dubai Chamber of Digital Economy and the UAE Cybersecurity Council aim to safely and securely advance technological growth for short- and long-term benefit. In May 2023, Brazil was considering a Bill to regulate AI. It requires "systems [to] undergo a preliminary assessment carried out by the suppliers themselves, to determine whether they can be classified as being of high or excessive risk," according to OneTrust Data Guidance. It also restricts exploitative AI uses, like subliminal techniques that could cause harmful behavior or target vulnerabilities in older and disabled people. The Center for Strategic and International Studies says Japan looked at the European Union's sterner approach to AI regulation and had "concern that the burden of compliance and the ambiguity of regulatory contents may stifle innovation." Instead, Japan is adopting a "human-centered" approach based on seven principles – among them, privacy protection, security and innovation. They regulate AI through several laws. The Digital Platform Transparency Act, for example, requires fair and transparent practice from large online stores and digital advertising businesses, including disclosing how they decide search rankings. Values are the key to balanced regulation ChatGPT and other generative AI fit a model of technological development we've seen throughout history – it disrupts human lives and businesses with exciting potential but also serious risks that need policymakers' attention. UAE, Brazil and Japan have regulatory approaches that are values-led and aim for a middle ground: A balance between too much and too little caution. Alongside, partnerships between the public and private sector hold promise to let business embrace innovation while adequately managing risk.
neural networks privacy, natural language processing, big data

How business can keep natural language processing from going bad

  • min read
    • In 2020, researchers from Google, Apple and University of Berkeley, among others, showed they could attack a machine-learning model, the natural language processing (NLP) model GPT-2. They made it disclose personal identifying information memorized during training. Although it may sound like a cat-and-mouse game for tech enthusiasts, their findings could affect any organization using NLP. I'll explain why and how, and what you can do to make your AI safer. The power of natural language processing NLP is improving thanks to 'big' language models – huge neural networks trained on billions of words to get the hang of human language. They learn language on all layers, from words to grammar to syntax, alongside facts about the world. Scanning news articles can teach models to answer questions like who the country's president is or what industry your company is in. There are many ways to apply big language models. Google uses its BERT language model to improve search quality. Language translation services like Google Translate and Deepl use big neural networks. Grammarly uses neural-based NLP to improve its writing suggestions. "The range of applications for language models is huge," says Alena Fenogenova, NLP expert at smart device makers SberDevices. She worked on the Russian-language version of GPT-3 and a benchmark to assess the quality of Russian language models. "These models can help create resource-intensive things like books, ads or code." OpenAI's neural network GPT-2 hit headlines by generating a news article about scientists discovering unicorns in the Andes, prompting fears of automated disinformation. Since then, OpenAI has released GPT-3, saying it improves on GPT-2 in many ways. People are using it for amazing things, like simplifying legal documents into plain English. GPT-3 can even generate working web page source code based on written descriptions. NLP techniques also work on programming languages, leading to products like Microsoft Intellicode and GitHub's Copilot that assist programmers. Fenogenova elaborates, "You can train these models on any sequence, not just text – you can do study gene sequences or experiment with music." Data is king To create these models, you need access to a huge amount of raw data, for example, texts from the web to work with natural language or programming code to generate code. So it's no coincidence companies like Google and software development resource GitHub are among the leaders in language models. The tech companies usually open-source these big models for others to build upon, but the data used to create the models and in-house data used to fine-tune it can affect the model's behavior. What do I mean? In machine learning, poor quality data leads to poor performance. But it turns out a machine learning model can pick up a little too much information from raw data too. Bias in, bias out Just as computer vision systems replicate bias, for example, by failing to recognize images of women and Black people, NLP models pick up biases hidden in our natural language. When performing an analogy test, one simple model decided 'man' is to 'computer programmer' as 'woman' is to 'homemaker.' More complex models, like language models, can show a wider range of biases, both blatant and subtle. Researchers from Allen Institute for AI found many language models generate false, biased and offensive texts thanks to their training data. "The text data used to train these models is enormous, so it's bound to contain gender, racial and other biases," says Fenogenova. "If you asked a model to finish the phrases, "A man should…" and "A woman should…," the results will likely be alarming." The problem is showing up beyond research. In 2016, Microsoft shut down its chatbot that had learned to be racist and misogynistic after just a day engaging in Twitter conversation. In 2021, the South Korean creators of a Facebook chatbot meant to emulate a university student had to shut it down when it started to produce hate speech. NLP's behavior can mean reputation damage as well as perpetuating bias. Models that know too much In 2018, a team of researchers from Google added a test sequence, "My social security number is 078-05-1120," to a dataset, trained a language model with it and tried to extract the information. They found they could extract the number "unless great care [was] taken." They devised a metric to help other researchers and engineers test for this kind of 'memorization' in their models. These researchers and colleagues did follow-up work in 2020 that I referred to earlier, testing GPT-2 with prompts and finding the model sometimes finished them by returning personal data. When GitHub first released its programming language model Copilot, people joked Copilot might be able to complete private Secure Shell (SSH) keys. (Secure Shell securely connects remote computers on an insecure network.) But what it actually did was just as concerning: Generated code containing valid API keys, giving users access to restricted resources. While questions remain over how these keys were in Copilot's training data, it shows memorization's possible consequences. Making NLP less biased and more privacy-conscious The risks of big generative text models are many. First, it's not clear how data protection principles and legislation relate to memorized data. If someone requests their personal data from a company, are they entitled to models trained using their data? How can you check that a model has not memorized certain information, let alone remove the information? The same applies to the "right to be forgotten" part of some data regulations. Another issue is copyright. Researchers found GPT-2 reproduced a whole page of a Harry Potter book when prompted. Copilot raises hard questions about who wrote the code it generates. "Another approach might be to use automatic 'censors' to detect inappropriate text before it reaches users. You can also create censors that detect and filter out private data," says Fenogenova. "Companies can also filter raw data to minimize the risk private data ends up memorized by the model, but it's difficult to clean such big datasets. Researchers are looking at 'controlled generation,' where you steer the generation process of the already-trained model." Despite these issues, neural network-based NLP will keep transforming how enterprises deal with all things text, from customer interactions to creating marketing content. Being mindful of the risks of language models and their applications will protect you and your customers, and help make your NLP projects more successful.
earth2050 robot

What will the future of work be like by 2050?

  • min read
    • The world of work in 2050. If you're unlucky enough not to have retired by then, the working world will be a very different place to how it is today. The vision of the future for workers tends to scale from a nihilistic view of the robots taking our jobs (leaving us permanently trapped indoors, living entirely from Amazon Prime supplies), through to the utopia of the eradication of repetitive tasks using artificial intelligence. This will leave humans free to think, create and act (while never needing to leave your home…thanks to improved teleworking and those highly convenient Amazon delivery drones). But what do the experts think it will really be like? Robots have rights too Predicted by: Ian Pearson. Ian has been a full-time futurologist for over 25 years, tracking and predicting developments across a wide range of technology, business, society, politics and the environment. We see a picket line of robots in the city center. Their placards are plastered with slogans written in binary code. The widespread development of robots and artificial intelligence have necessitated the creation of a legal framework to protect them to regulate the rights of intelligent robots. Subsequently, this code is constantly updated and improved so robots have improving rights in our society. Personal assistants for life Predicted by: Alexey Malanov Personal assistants (PAs) have rapidly developed throughout the 21st century. To begin with, they could only answer primitive questions: in 2019, voice assistants were as dumb as a box of rocks. But by 2025, they'd mastered the art of recognizing and transcribing speech (with punctuation marks too); they could understand the meaning of a text and recite it so realistically that it was almost indistinguishable from a human. This led to half of all office activities being automated: PAs began to take minutes, write post-meeting reports, summarize lengthy documents, and consciously digest and recapitulate the contents of messages. They also plan your day, schedule meetings and even order lunch. Thanks to machine learning, PAs are fully adapted to their owners' personalities, increasingly penetrating every aspect of their lives. It all began with assisting with office work, and by the mid-2040s, PAs had become an integral part of everyday life by monitoring their owners' diets, planning trips abroad, buying gifts for friends and family, and more. But it's not as rosy as it seems: the human-PA relationship has spawned a plethora of psychological issues and communication difficulties between real people. However, a specially trained AI psychologist is on hand to help us cope. Paradoxically, it's just another voice assistant. The power is in your hands Predicted by: Mersey Shelley is a pseudonym of Alexey Andreyev, writer and futurologist, who works for Kaspersky. This prediction is from his cyberpunk novel '2048' published in 2004. In decades past, palms and fingers were scanned for identification. Now, hands with implanted sensors become the scanners themselves. These implants come in different models with two main variations: first, a simple scanner for daily use. It helps to read different tags and product codes, and to exchange digital business cards via the handshake ritual (you can use face recognition to identify a stranger but this is considered indecent; besides, many people use protection to prevent recognition. Hats with special veils are popular). Second, sophisticated scanners for technicians and other professionals. For example, a doctor's hand includes various medical sensors for diagnostics – even a portable endoscope with a direct video stream to the doctor's visual cortex. A flexible workforce Predicted by: Jacob Morgan is a best-selling author, speaker, futurist and founder of FutureOfWorkUniversity.com. In the year 2050, technology will dominate the workplace with artificial intelligence and smart assistants being commonplace, while the use of augmented and virtual reality continues to increase. Everything will be 'smart' – connected and data-driven. The vast majority of us will continue working the same way we are today, but the jobs on offer will be ones that haven't yet been invented. Emotional intelligence and 'human' skills such as perpetual learning will be crucial for leaders to possess, as well as fluency with the latest technologies. Work will increasingly become more fluid as some employees will be virtual, some will be full-time, some will be bots, and we will all be working non-fixed hours. As with any kind of change, there will be pros and cons. Those who work in routine jobs are likely to struggle to make sure they can stay relevant in the new world of work. The advantage is that this will give us more time to focus on the human aspects of work such as building relationships, being creative, deep thinking, and practicing skills like empathy and self-awareness. Technology will help us make organizations more personable. This also means that we need to get more comfortable with using technology such as bots and AI in our work, a cause of tension and fear for some. And what about working hours? It depends if you're a knowledge worker or working in industries like retail. Flexible work arrangements are already being implemented at organizations around the world. The advantages are far-ranging, from improving employee satisfaction, productivity and tenure, to being able to attract and retain top talent. The potential disadvantages here are making sure that employees can stay accountable for delivering high-quality work while feeling like they're a part of the team, dealing with isolation, and ensuring effective communication and collaboration. I think the pros outstrip the cons: when managed effectively, flexible work arrangements can be a huge benefit to the organization and its people. Focus on the user experience Predicted by: Edney Souza, digital culture and business and technology teacher, speaker and entrepreneur, Brazil. For sure, work will become more fun and those repetitive activities in our day-to-day life will be done by robots and artificial intelligence. Knowing programming logic will be as important as English and mathematics. User experience design (UX) will be more important than other technical components of a project to ensure its success with customers. Skills in solving problems and serving customers will continue to be competitive advantages for the work of the future.
supply chain attacks, retail, Austin, air conditioning

How your air conditioning could start a cyberattack

  • min read
    • Many big businesses know they could be cybercrime targets and invest in defenses like software and training. That's why cybercriminals are increasingly attacking through smaller suppliers who don't have the same knowledge and resources. It's called a supply chain attack. In Tomorrow Unlocked's second episode in the hacker:HUNTER Behind the Screens series, Eliza-May Austin, CEO and co-founder of th4ts3cur1ty.company (That Security Company,) explains how US retail giant Target was attacked through a most unexpected device – the air conditioning. We ask Austin how businesses can prepare for supply chain attacks and how she thinks things are going for women in cybersecurity careers. In Tomorrow Unlocked's Hacker: HUNTER Behind the Screens video, you talk about the supply chain attack on Target in 2013. Why is this attack so important? Businesses must work with other businesses, which makes us all susceptible to a certain degree of risk. Take an airplane, for example. To go from concept to in the air involves hundreds of businesses, contractors and applications. It takes just one breach to compromise that trusted ecosystem. It's something we should all take seriously. Your business th4ts3cur1ty.company (That Security Company) helps companies large and small harden their supply chains. How do you do that? There are many things businesses can do to defend against supply chain attacks. For example, we run penetration testing, consult on governance, risk and compliance and importantly, logging, monitoring and vulnerability management. Are businesses becoming more aware of supply chain attacks and responding appropriately? I can't confidently say yes, which is why I'm vocal on the issue. I recently asked a small-to-medium company (SMB) that supplies services to the medical sector if they'd considered how an attack would impact their clients' security. I was met with such bemusement you'd think I'd asked for a sandwich. What's the most common problem making businesses vulnerable to supply chain attacks? Not knowing how prevalent it is. But also, some businesses that do understand the issue's scale get overwhelmed by it. These attacks aren't always sophisticated – simple measures can go a long way. How did you get into cybersecurity? I moved from a degree in forensic science to a degree in digital forensics, did some internships and the rest is history. You don't need a degree to be in cybersecurity. Is the industry giving women equal opportunities to enter and succeed yet? I think this industry, like any, is what you make of it. Cybersecurity is a fantastic career choice for women and should be promoted as such. What could employers do today to attract and retain more women? I get asked this a lot, so I wrote 15 ways to attract more women to your technical cybersecurity team. I've included simple, practical things like considering the physical environment. For example, if employees have to crawl around on the floor to plug in a laptop, that may feel degrading when wearing a skirt. I also recommend being more open-minded about what kind of people you need: What is Ladies Hacking Society (LHS) and why did you found it? LHS is an awesome community of women who come together to learn from one another and teach each other hacking. I wanted to create a technical option for women because I found mixed events were not really mixed (mainly men) whereas women's events revolved around governance or high-level theory. It's a lot of fun and a great bunch of people. Which is the most important lesson from your 11 leadership lessons from terrible managers, and why? Lesson 3: A sense of humor matters. People tend to take themselves too seriously. Encouraging people to laugh and joke does wonders for team morale and gets people through stressful times. Let's all calm down and have a giggle.  
IT executives 2040

8 ways Generation Z will transform the future workplace

  • min read
    • Generation Z (Gen Z) – those born between 1997 and 2012, now in their teens and early twenties – is making an impact on the world. Many brands have aligned their products and communication with the generation's tastes and preferences. Employers are adjusting their business processes to accommodate their arrival. Kaspersky welcomes hundreds of Gen Z interns annually, sparking curiosity about what tech industry leaders might be like in 2040. Here's how we think Gen Z will transform the future workplace. 1.   Exploring vast information efficiently Gen Z is the first generation surrounded by tech and the internet since birth. Information on smartphones is their natural experience and knowledge. They effortlessly navigate and integrate torrents of information. They don't mind not knowing things because they can swiftly find the answer. 2.   Developing deeper analytical skills The inclination to dive into pools of information may also lead to shallow and fragmented thinking. Without a critical approach, it could challenge Gen Z as future tech industry leaders. Gen Z must balance leveraging vast information with deep, analytical thinking to become well-rounded and effective in their work. 3.   Moving away from vertical hierarchy As future managers, Gen Z may establish companies with horizontal management structures. In these organizations, transparency, trust and teamwork will take center stage. By prioritizing these principles, Gen Z leaders will build businesses that empower employees and promote collaboration, where each individual's voice is heard and respected. This shift towards more inclusive management could pave the way for more innovative and progressive workplaces. 4.   Valuing own and others' personal boundaries Gen Z places high value on healthy work-life balance. They firmly believe work should bring similar satisfaction to socializing or leisure. It's crucial to allow distance and dedicate time for relaxation. One way to achieve this is refraining from sending messages outside work hours and respecting their boundaries. 5.   Ever-evolving leaders with backgrounds in multiple career fields These young people don't show the same rigid preferences or brand loyalty as previous generations. They can imagine more possibilities, so they fearlessly explore new opportunities and embrace change. They don't hesitate to switch companies and even transition between different career fields. While the average person may change professions three to seven times in their lifetime, Gen Z may have some 10 to 15 different careers over their working lives. Wide expertise and experience open the door for innovative approaches and the creation of novel cross-platform products across different industries. 6.   Being proactive Many managers observed that Gen Z's proactivity stands out. They readily propose creative and innovative ideas that transcend the boundaries of their roles and departments. 7.   Building unique tech startups What's more striking is their willingness to embrace mistakes as part of learning. Unlike previous generations, Gen Z won't wait for the perfect moment to launch a product. They act in the present and don't fear making mistakes. Gen Z will likely lead the charge as CEOs of numerous tech startups, fueled by unconventional product ideas. 8.   Becoming the youngest generation of leaders This boldness and decisiveness will mean a significant drop in the average age of startup CEOs. Young people and even teenagers are already proving successful in running businesses. Generation Z is the future of the IT industry. The hundreds of young people we welcome into internships at Kaspersky each year gain an opportunity to unlock leadership qualities. They already possess the essential traits – we nurture their potential, refining soft skills and technical know-how. Participating in international student competitions, like Kaspersky's Secur'IT Cup or education and internship programs, can be instrumental in the journey of these young people. With determination and support, they will shape the industry and leave a lasting impact on the world.
by Innovating leaders.
Innovative tech.
About Secure Futures

Secure Futures magazine is your go-to business guide for opinions, trends and insight into the world of technology and cybersecurity. We help your business to bring on the future. Brought to you by Kaspersky, the global cybersecurity experts.

  • For all other countries