Keeper Security offers solutions to the NCSC’s report, but it is enough?

The National Cyber Security Centre’s (NCSC) recently reported that ‘highly significant’ cyber attacks have risen by 50% over the last year, a clear indication of both the scale and sophistication of modern cyber threats. Increasingly AI-driven and often mirroring state-level capabilities, these attacks are now impacting real-world operations including supply chains, payroll, and customer trust.

Darren Guccione, CEO and co-founder of Keeper Security, argues that this trend demands a fundamental shift in how organisations approach security,

‘‘To counter the escalating volume and sophistication of attacks, organisations must strengthen their defences through zero-trust security architecture — one that assumes no user, device or connection is inherently safe. Adopting a Privileged Access Management (PAM) solution will ensure administrative accounts are tightly controlled, least-privileged principles are enforced and access to critical systems are monitored in real time.’’

ERIS SAYS: The solutions suggested by Keeper Security form a valuable component of a modern security architecture. However, Guccione’s response narrows a complex, systemic issue into a purely technological fix. It is missing a recognition that cybersecurity is no longer just an IT problem, but rather a socio-technical and governance challenge. As threats evolve, so too must accountability models, organisational culture, and budget priorities. Technology can only be effective when embedded in a broader framework of leadership, policy, and behavioural change.

In particular, the growing role of AI in both attack and defence highlights the urgent need for AI governance, frameworks that ensure transparency, oversight, and ethical deployment of automated security tools. Without clear governance structures, organisations risk reinforcing the same vulnerabilities they aim to protect against. Effective cybersecurity now requires not only robust technology, but responsible stewardship of the AI systems increasingly embedded across financial operations.