What a security strategy that survives 2027 looks like

Publisher excerpt From CSO Online

Equifax CISO Jeremy Koppen sees the same dynamics most security chiefs are facing: hackers on the one side using AI to perform more sophisticated attacks at unprecedented speed, and defenders on the other adopting AI to match that volume and velocity. “AI is changing the pace on both sides,” he says. “Attackers are using it to operate at greater scale, and Equifax is using it to innovate more quickly.” In the next year, Koppen will continue to evolve Equifax’s security strategy to keep with an accelerating threat environment. “That means building on the security already embedded across our design and development process, so checks run early and automatically,” he says. “It also means expanding how we use AI in our own security operations to handle routine work, so our experts can focus on the threats and initiatives that matter most. Done well, security becomes one of the reasons a product can launch sooner.” As for the rising tide of AI agents entering enterprise workflows, Koppen says that “identity controls are central” to his 2027 security strategy. “Across the industry, more activity on enterprise networks now comes from AI agents, bots, and automated workflows, and most traditional security controls were designed with a human user in mind,” he explains. “That’s why we’re applying the same rigorous verification to these identities that we apply to people.” Of course, Koppen, like other seasoned security leaders, knows his IT security strategy must evolve to addres…

Excerpt only, shown with attribution. This content belongs to the original publisher and has not been independently verified by CyberSecurity.pk.