Cybersecurity has always been a top concern for businesses, but the rapid shifts brought on by the COVID-19 pandemic have forced companies to rethink their security strategies and adapt to new, more complex threats. In a recent interview with Express Computer, Mihirr P Thaker, Chief Information Security Officer (CISO) at Allcargo Logistics Ltd, shared insights into how the logistics and supply chain industry is navigating this evolving threat landscape. He discussed the increasing importance of AI and machine learning (AI/ML) in cybersecurity, the challenges around vulnerability management, and the critical role of human intelligence in security actions. Thaker’s insights also highlighted how organizations, especially those in logistics, need to rethink their security frameworks to manage risk more proactively. As we move into a new era of digital transformation, cybersecurity strategies must evolve alongside it.
The logistics and supply chain sector, known for its global reach and decentralized operations, faces unique challenges in securing its infrastructure. The shift to remote work during the pandemic, alongside the continued expansion of the Internet of Things (IoT) and cloud computing, has only increased the complexity of securing endpoints and user identities. According to Thaker, the “new perimeter” of cybersecurity no longer lies within a company’s office or data center but instead extends to any endpoint, whether that’s an employee’s home office or a device used while traveling. For the logistics sector, this means that security measures must adapt to protect not only a company’s internal systems but also a sprawling network of third-party agents, suppliers, and partners spread across different locations worldwide.
The Impact of the Pandemic on Cybersecurity Strategies
Thaker explains that the pandemic accelerated the shift toward remote work, which fundamentally changed how organizations approach cybersecurity. Prior to the pandemic, many companies, particularly in industries like logistics, focused on securing their on-premises data centers and core office environments. However, with employees working from home and traveling, security could no longer be confined to the traditional office perimeter. The new focus shifted to protecting the endpoints from which users connect to the network—whether those endpoints are personal devices at home, remote locations, or traveling employees.
According to Thaker, this shift to a more distributed workforce has led to a major challenge in the logistics industry, where organizations must secure the identities and devices of employees who are spread out globally. The logistics sector is particularly vulnerable due to its expansive global ecosystem, which includes a vast network of third-party agents, contractors, and suppliers who often operate from remote locations. This global network, while crucial to the functioning of the logistics and supply chain sectors, increases the complexity of securing data and communication across so many different touchpoints.
As organizations continue to digitize their operations and expand their networks, securing endpoints becomes an ongoing challenge. Thaker highlights that businesses must not only protect their internal network but also safeguard their external touchpoints from malicious threats. The rapid digitalization of supply chains, as well as the growing reliance on third-party vendors, makes the entire system more vulnerable to cyberattacks. As Thaker puts it, “The attack surface has grown exponentially.”
Vulnerability Management and the Rising Importance of Proactive Threat Intelligence
One of the key security challenges highlighted by Thaker is vulnerability management, which has become more complex due to the ever-evolving nature of cybersecurity threats. The logistics industry, with its highly interconnected systems and third-party vendors, faces a high volume of potential vulnerabilities. However, traditional methods of evaluating and prioritizing vulnerabilities, based solely on their criticality ratings, are no longer sufficient. As Thaker points out, organizations must also take into account the exploitability probability of a vulnerability. This involves assessing how likely a vulnerability is to be exploited in the wild, given the current threat landscape.
The rapid pace at which new vulnerabilities are discovered requires a dynamic and continuous approach to vulnerability management. Traditional industry standards, which rely on set vulnerability criteria, are increasingly being outpaced by the speed at which new threats emerge. Thaker stresses that organizations need to move away from reactive security strategies and adopt a proactive threat intelligence approach. This involves gathering insights from a variety of sources, including industry threat feeds, internal monitoring, and external intelligence, to anticipate and mitigate potential threats before they can cause damage.
A report from Ponemon Institute supports this shift toward proactive threat intelligence, revealing that 65% of organizations that actively monitor threat intelligence are better equipped to prevent breaches. With this in mind, Thaker emphasizes that organizations must continuously update their incident response plans and ensure they are prepared for unexpected security events. 82% of cyberattacks are classified as “zero-day” threats—meaning they exploit vulnerabilities that have not yet been patched—which makes it even more crucial for organizations to stay ahead of the curve by continuously assessing their security posture.
The Role of Human Intelligence in Strengthening Cybersecurity
Despite the growing role of AI and machine learning in cybersecurity, Thaker highlights that the human factor remains the most significant vulnerability in the security chain. As he puts it, “The weakest link in the entire chain is the human.” While automated security tools can detect and block many threats, human behavior—such as falling for phishing scams or neglecting to follow security protocols—often remains the most significant risk. For organizations to improve their overall security posture, Thaker advocates for a focus on employee education and awareness.
He stresses that organizations must implement comprehensive training programs that educate employees on cybersecurity best practices and raise awareness about potential threats. “Security is not just about technology,” he explains. “It’s about changing behavior and making security a part of the organizational culture.” According to Thaker, businesses should not only train employees on how to use security tools but also instill a sense of responsibility among staff to follow secure practices. Thaker’s approach aligns with findings from Cybersecurity Insiders, which reveal that 95% of security breaches are caused by human error, underscoring the importance of addressing the human element of cybersecurity.
To address this, Thaker recommends a combination of continuous security training, clear communication about the risks associated with cyber threats, and rewarding good security practices. Organizations should recognize and incentivize employees who follow cybersecurity protocols, ensuring that security remains a shared responsibility across the company. By embedding a security-first mentality, businesses can reduce their overall risk exposure and create a more resilient defense against cyber threats.
AI, Machine Learning, and ROI on Security Investments
The emerging role of AI and machine learning in cybersecurity cannot be overstated, according to Thaker. These technologies have proven to be essential in managing large volumes of security alerts, particularly in the context of the logistics and supply chain sectors. AI and ML can quickly triage alerts, identify the most critical threats, and help security teams prioritize their efforts more effectively. Thaker notes that AI/ML tools are especially valuable in the areas of real-time scanning, vulnerability identification, and cyber threat intelligence, which enables faster decision-making and quicker response times.
By leveraging AI and ML, organizations can better manage the overwhelming number of alerts generated by security tools, ensuring that security teams can focus their attention on the most pressing issues. In fact, a study by IBM found that companies using AI-driven security systems saw a 30% reduction in response time to security incidents, allowing them to mitigate damage more quickly. As the volume and sophistication of cyberattacks continue to grow, AI and ML are becoming indispensable tools in detecting, analyzing, and responding to potential threats.
However, while AI and ML can significantly improve an organization’s security posture, Thaker stresses that technology alone is not enough. Organizations must also focus on maximizing the ROI of their security investments. This requires more than just purchasing the latest security tools—it involves leveraging these tools effectively, reporting the value they deliver, and continuously optimizing their performance. As Thaker explains, organizations should demonstrate to management how security technologies help mitigate risks and protect assets, ultimately contributing to cost savings. Furthermore, regular reviews with vendors and continual training for staff ensure that security tools are being used to their full potential.
Looking Ahead: Security Priorities for 2025 and Beyond
As organizations continue to adapt to an increasingly complex cyber threat landscape, Thaker outlines several key priorities for Allcargo Logistics moving forward, particularly regarding vulnerability management. With cybersecurity threats evolving at an unprecedented rate, Thaker emphasizes that the ability to quickly detect and resolve vulnerabilities will be essential in maintaining a strong security posture. By 2025, Allcargo Logistics aims to enhance its real-time vulnerability scanning capabilities, enabling the company to quickly address issues before they can be exploited.
Thaker’s vision for the future of cybersecurity is rooted in continuous improvement and agility. In a rapidly changing threat environment, companies must stay ahead of emerging risks by constantly developing their detection and response strategies. He encourages organizations to prioritize incident preparedness and ensure they are ready to respond effectively to breaches when they occur. By focusing on vulnerability management, proactive threat intelligence, employee education, and the integration of AI/ML technologies, companies can build a robust defense against the ever-evolving landscape of cyber threats.
In conclusion, Mihirr P Thaker’s insights underscore the critical need for businesses, particularly those in the logistics and supply chain sectors, to adapt their cybersecurity strategies to the changing landscape. By focusing on human intelligence, leveraging advanced technologies like AI and machine learning, and maintaining a proactive stance on threat management, organizations can better safeguard their systems and data in a world where cyber threats are becoming increasingly sophisticated. As we approach 2025, the continued evolution of cybersecurity practices will be key to ensuring resilience in the face of new and emerging risks.
