Hello everyone. Isn't it great to be in a live audience?
You know, a little trivia about Rohit. So Rohit and I used to work together, and when I had my daughter, he was the first coworker. I used to live in Chicago at the time, and you know, we were working in California, so I was going back and forth. And when I was on paternity leave, he was the first coworker that came out there to see my daughter. So it's so nice to share a stage with him. I know. Look at that.
So, you know, it's great to be in person, but I used to have a superpower and I've kind of lost it. I used to have a superpower which was 7 minutes flat I could pack my bags to go for a week-long trip. I don't know if any of you folks feel this, but I'm feeling it right now because yesterday it took me about 70 minutes of staring at my suitcase and I still forgot a bunch of things. My entire product line for my hair was like I left it at home. So it took me a while to get ready. So if today you feel like I'm a little disheveled, it's because I left my hairline product at home.
I'm feeling a little disrespected here. It seems like that wasn't a joke. That was the truth. Anyway, it's good to be here. And you know, if you take away the jokes though and just actually rewind back a few years and what it was like in just booking travel and the amount of work that you'd have to do. You'd have to make multiple calls. You'd have to go on multiple websites. You'd have to go to multiple companies and deal with making sure that you get your hotel done, right? You went to your car rental place. You also got your, you know, kind of flights booked. Today you don't have that issue.
Today you actually go to a single site and you've got this fluidity of exchange of data and everything's pretty interconnected and you're able to go out and in a matter of minutes just go out and get your, you know, reservations booked. And this kind of interconnectedness is something that most of us have learned to expect out of day-to-day life, whether it be within your personal situation or at work. And what you're starting to see is that there's a tremendous amount of benefit of having this interconnectedness, but what you also see is there's a fair amount of security challenges that come along with it. And so if you look at, you know, malware or phishing attacks or ransomware, these are growing at double and triple-digit kind of, you know, rates as you move forward. And this interconnectedness itself is actually not just something that's impacting you, but every single member of the supply chain, your customers, your suppliers, your partners. When there's something that happens to them, it impacts you, right? And so there's this kind of ecosystem that we're living in right now. And in this interconnected world, there's a simple but massively overlooked problem that I want to spend this session talking about.
But before we do that, what I wanted to do was make sure that we talk about three specific trends that our 300,000 customers are actually sharing with us. And by the way, this is going to be kind of a stacking of trends. So Rohit went through three trends. I'm going to go to three trends. I'm sure there's the next person that's going to come that's going to go through three trends. And you can then stack rank us and tell us which one's better. But the reality is that there's a key set of trends that we actually have that are becoming challenges in the industry that we really have to think about collectively as a society rather than individually. So let's talk about the first trend. The first trend is the fact that we as businesses are competing as holistic ecosystems, not as individual organizations by ourselves.
What that means is that you yourself might be materially impacted in the way that your production line works, in the way that your supply chain works, in the way in which your demand cycle works based on what happens to the other members in the ecosystem. Now, what you're starting to see over here and a great example of this is a top automaker recently. They had to stop the entire production line because one small component parts manufacturer was not able to protect themselves because they had a potential security breach and so you had to have the entire production line stopped.
Now, what specifically are companies doing about this is they're starting to take a much more measured approach around risk and making sure that they can assess risk and say, well, you know, if I'm going to have vulnerabilities, the reality is you have newer and newer vulnerabilities that keep coming up every single day. But off the known vulnerabilities, here's a statistic that's fascinating. Of the known vulnerabilities that an organization knows, only 20% of them actually get remediated and patched and fixed. Only 20%.
Think about that. And so what we need to do is make sure that we take a much more risk-based approach to vulnerability management. That's what's happening and that's what more and more companies are doing. And they're starting to make sure that they take a more informed decision based on which specific vulnerabilities do I need to patch based on the highest amount of risk rather than first in, first out so that I can make sure I have a better security posture. So that's the first trend. And associated and tied very closely to that first trend is the second trend, which is everyone is an insider.
And what I mean by everyone is an insider is firstly humans are pretty easy targets to go after for cyber criminals and attacks are becoming much more bespoke and personalized. They're going after Jeetendra Patel rather than going after the entirety of the population that you might have. And so they're getting much more personalized and more and more of these individual targets, whether they be, you know, employees. But you don't just have employees anymore. You have employees and contractors, but you have suppliers and customers and partners. So the amount of people that can go out and impact your security posture is getting larger and larger and larger. And so everyone's an insider.
You're starting to see that. But specifically what's starting to happen, and here's another interesting statistic, is 56% of the breaches that happen happen because of an unknowing employee negligence act rather than something that's actually malicious in intent. 56%.
Now, if you really start thinking about this and go, no one's going to be working to plan to be negligent when they come into the office. No one says, 'Yeah, I'm coming into the office. I'm going to be negligent today.' Right? But mistakes happen. And the reason for that is because the friction is too high. And because of the friction being high, the efficacy goes down. And so you have to make sure that those get balanced. In fact, an example over here is the Metropolitan Police. There was an employee that accidentally deleted 8.7 million records and slowed down prosecutions that impacted 17,000 cases just out of pure negligence. Right? And so when you start thinking about these pieces, the way that we're actually going out and attacking these problems is through zero trust. We're saying, well, let's make sure that we actually have the least privileged access that we can provide to people. And so there's a zero trust mechanism that's in place. And customers continually are needing to assess behavior and grant continuous assessment of risk and then grant trust rather than making sure that that only happens at the time of login. So what you're now starting to see happen is rather than saying I'm only going to verify whether you are who you say you are and give you access at the time of login, I'm going to assess your behavior on a regular basis and if you're doing something that's anomalous in nature even though you might have logged in, even though you have access, I'm going to make sure I can intercept.
And so that's what's happening from a, you know, zero trust standpoint. And the third major trend that you're seeing is something that we've all lived over the course of the past couple years and it's around hybrid work. People are going to work in mixed mode. Sometimes they're going to work in the office, sometimes they're going to work at home, sometimes they're going to be somewhere in between. And when you actually see this mixed mode working, what's going to happen is you're going to be accessing data and systems from any device, whether it be managed or unmanaged. You're going to be accessing applications that are either sanctioned or unsanctioned and you're going to be accessing them from networks that are either secured or unsecured.
And you need to make sure that while you're accessing that, what do we specifically need to do so that we can make sure that the risk of breach is low, the risk of intellectual property theft is low. And this puts a lot of pressure on the SecOps team. It puts a lot of pressure on the NetOps team, right? And so specifically, what are we doing to go out and address this trend? And what's starting to happen is rather than point solutions, you're starting to see integrated architectures take more and more prominence in this market. And when I talk about integrated architectures, I'm talking about networking and security coming together rather than being specifically separate islands by themselves.
And to simplify management, we need to make sure that the management is simplified not just for the SecOps person but also the NetOps person and ideally do it in a way that's fluid and also make sure that the user has the lowest amount of friction because what you've now started seeing is to what Rohit was talking about, you don't have to trade off security for convenience. What you're starting to see happen is when the friction goes down, your efficacy automatically goes up. So you're starting to see this integrated architecture come in place. Those are the three major trends that we're seeing in our customer base, which is businesses are competing as ecosystems, everyone's behaving like an insider, and hybrid work is here to stay and is actually causing far more challenge in how you can secure an organization with a tremendous amount of pressure.
So what do we start to do about this entire area and what's the big challenge that we're starting to see happen that I talked about earlier? Well, the big challenge we see is that we need security resilience. Just like you need business resilience and just like you need operational resilience, there's a need for security resilience because there's a massive ripple effect and the weakest link in your supply chain can bring down the entirety of your entire ecosystem.
So, what is happening today? Well, we have this construct that Wendy Nath, who by the way gave a great, was participating in the rap music earlier on. She's right there. She is the head of Cisco's advisory CISOs and she coined this term called the security poverty line. And what does the security poverty line mean? It means that there's a baseline level of minimum security posture that every company should maintain. And when companies don't have the right level of resource or know-how to go out and maintain that, that's when they fall below the security poverty line.
And what that does is puts the entirety of the ecosystem at risk. Right? And so what we want to do is make sure that when this happens, you don't ignore the smaller companies, the not-for-profit companies that are participating because 60% of small businesses that do have a cyber attack actually go out of business in 6 months. And so if you're below the security poverty line and you're actually participating in an ecosystem, not only are you going out and putting yourself at risk, but the entire ecosystem is at risk. Now, we collectively have to make sure that this problem gets solved.
And so to talk a little bit more about that, what I wanted to have was my partner in crime, Sheela Shankar, who is the SVP and GM for the security business, to come over here and talk about the dimensions of the security poverty line and specifically what we need to do collectively as a group to make sure that we can go out and address this issue because if we don't address the least prepared in the world for going out and preventing themselves, the most prepared will suffer. So with that, let me make sure that I invite Sheela Shankar on stage. Sheela, come on up.
