How enterprises can protect themselves
Today’s enterprises need security that is built around centralized identity, least privilege, and automation, Chu emphasized. This means strong single sign‑on (SSO) with multi‑factor authentication (MFA) and contextual policies; modern secret management for passwords, keys, and tokens for both humans and machines; privileged access capabilities that can issue short‑lived access on demand with full logging; and analytics that stitch together activity across human accounts, service accounts, and AI agents.
From a cultural perspective, organizations should establish clearer ownership of identity and privilege management, shared goals, and top-down messaging around cybersecurity practices, he said.
Also, critically, organizations must adopt tools that easily integrate into existing processes and workflows, thus reducing friction and reducing user workarounds. “The key to effective implementation is to make security as invisible as possible to the user as they do their daily work,” Chu asserted.
