Cyber Resilience
Cyberattacks are becoming more frequent. At the same time, AI is making them more sophisticated, while organizations continue to advance digitalization, automation, and innovation. What does it take to stay secure in this environment? We spoke with Jonathan Davis, Partner at Drees & Sommer and Head of Digital Services.
Jonathan, many organizations invest heavily in technical security measures. Where do the biggest risks lie today?
The biggest attack surface remains people.
Many successful attacks do not begin with a technical vulnerability, but with a convincing email, a phone call, or a manipulated message. Cybercriminals deliberately exploit trust, urgency, and human behavior.
With AI, these attacks are becoming even more convincing. Messages appear more professional, information can be gathered more quickly, and attacks can be tailored to individual targets. As a result, awareness is becoming an increasingly important factor in cybersecurity.
Who is actually behind cyberattacks?
There are always people behind attacks.
Their motivations vary considerably. Some are driven by financial gain, while others are seeking access to sensitive information, intellectual property, or strategically valuable knowledge.
That is why cybersecurity has become much more than a technical discipline. Today, it is an essential component of risk management and business strategy.
Which digital threats are organizations facing most frequently today?
The two major challenges are phishing and social engineering. Attackers seek to deceive people and persuade them to take actions that provide access to information or systems. Their methods are becoming increasingly sophisticated, and fraudulent communications are often difficult to distinguish from legitimate ones.
This is why investing in technology alone is not enough. Organizations need a strong security culture in which employees remain vigilant and are able to identify suspicious activity at an early stage.
Many people see cybersecurity as a barrier. Isn’t that at odds with digitalization and innovation?
Quite the opposite. Cybersecurity should enable innovation, not prevent it.
Organizations are investing in digitalization, AI, and automation to remain competitive. However, these technologies can only deliver their full value when they are built on a secure foundation.
Cybersecurity is therefore not an obstacle to transformation. It is a prerequisite for it.
Why is cybersecurity becoming increasingly important for clients and business partners?
Because organizations operate in increasingly connected ecosystems.
Clients, partners, and service providers are digitally interconnected. As a result, security risks can emerge across the entire value chain. Expectations regarding transparency, standards, and demonstrable security measures continue to grow.
Increasingly, cybersecurity is becoming a matter of trust.
What distinguishes resilient organizations?
Resilient organizations do not assume that every attack can be prevented.
Instead, they establish the structures, processes, and culture needed to identify risks early, respond effectively, and maintain business continuity when incidents occur.
As a result, the focus is shifting from prevention alone toward resilience.
What is the most important message you would like to share with organizations?
Cybersecurity is a shared responsibility. Technology plays a critical role, but ultimately it is also about people, processes, and decision-making. Organizations that embed security into their transformation initiatives create the foundation for sustainable growth and digital innovation.
Because at the end of the day, behind every attack, there are people. And that is why people remain one of the most important factors in effective cybersecurity.
