Five Cybersecurity Lessons from IGEL Leaders for Every Month of the Year

From prevention and visibility to AI governance and cyber resilience, IGEL leaders share the priorities organizations should focus on long after Cybersecurity Awareness Month ends.

Cybersecurity Awareness Month shines an important spotlight on security, but cyber threats don’t end when the calendar flips to November.

Ransomware actors don’t take a break. AI-powered attacks don’t slow down. Critical infrastructure, healthcare systems, and enterprise environments remain under constant pressure from increasingly sophisticated threats.

As organizations look beyond awareness campaigns, a more important question emerges: Are we prepared when something goes wrong?

Detection still matters, but so do prevention, containment, and the ability to maintain operations during a disruption. Security leaders are increasingly shifting their focus from reacting to threats to building resilience. That means reducing risk before an incident occurs, limiting the impact when one does, and ensuring the organization can recover quickly.

The following perspectives from IGEL leaders highlight practical ways to strengthen security, improve resilience, and reduce risk throughout the year.

From Security to Resilience

For many years, cybersecurity programs focused primarily on keeping attackers out. While prevention remains essential, organizations today are increasingly adopting resilience-based strategies that assume attacks may occur and emphasize the ability to contain and recover from them.

As John Walsh, Senior Vice President and Field CTO for Government and Critical Industries at IGEL, recently observed in commentary for Fox News:

“One of the big things we have to consider is that we’re moving from a thought process of security to resilience.”¹

Walsh puts it this way:

“Security is kind of like, ‘I feel I can trust that things are okay.’ Resilience is where you make the assumption the attacker is present—where, when the attacker is present, you control the blast radius.”¹

Security teams know that stopping every attack isn’t realistic. The challenge is minimizing the damage and recovering quickly when an incident occurs. Awareness is important, but resilience is what keeps operations moving when systems, applications, or users are impacted.

Trust Must Be Continuously Verified

As organizations adopt more cloud services, SaaS applications, browser-based workflows, and AI tools, understanding how employees use these technologies becomes just as important as protecting them. Security teams need visibility to identify risks, protect data, and ensure policies are applied consistently across the environment.

According to Matthias Haas, Chief Technology Officer at IGEL in an interview with ChannelInsider:

“Policy alone is not able to govern shadow AI, unless it’s backed by the visibility and technical enforcement at the point of access.”²

User education remains essential, but training only goes so far if organizations lack visibility into how applications and data are actually being used. Organizations need to understand how people are actually using applications and whether security policies are being enforced consistently across the environment.

This same philosophy underpins Haas’s broader perspective on Zero Trust security:

“Devices are no longer inherently trusted – they must continuously prove their integrity.”³

He further explains:

“It is no longer just about hardening infrastructure or encrypting traffic. Today, it is about trust – trust in cryptography, platforms, and every endpoint connecting to critical systems.”³

The same principle applies to emerging technologies such as AI. In discussing the role of governance and standards, John Walsh noted in a recent Newsweek article:

“If the United States, working with industry and standards organizations, helps establish practical and measurable requirements for trustworthy AI, technology providers seeking broad commercial acceptance will have a strong incentive to design to those requirements.”⁴

Trust depends on more than technology alone. It also requires clear standards, measurable controls, and governance frameworks that help organizations adopt new capabilities without introducing unnecessary risk.

Together, these perspectives highlight an important point: awareness works best when it’s supported by visibility, governance, and technical controls.

Building Security for the Reality of Modern Threats

Most security leaders would agree on one thing: there’s no such thing as perfect protection. Instead, organizations should focus on reducing risk, strengthening resilience, and improving recovery capabilities.

As Jason Mafera, Healthcare Field CTO at IGEL, explains in an article for MD+DI Online:

“Cyber security is a function of risk mitigation, and there is no perfect security.”⁵

This reality requires a shift away from traditional perimeter-focused thinking and toward architectures designed for resilience.

Mafera advises:

“We have to rethink cybersecurity investments and should focus around built-in resiliency and rapid recovery, rather than a castle and moat approach.”⁵

That’s especially true as organizations balance cloud adoption, hybrid work, and growing pressure to do more with fewer resources. The ability to rapidly recover and maintain operations may ultimately prove just as important as preventing an incident in the first place.

Prevention Still Matters

While resilience is critical, organizations cannot lose sight of prevention. The most effective security strategies combine the ability to withstand disruption with an architectural approach that reduces attack opportunities before compromise occurs.

In discussing IGEL’s Preventative Security Model™, Klaus Oestermann, CEO of IGEL, told Frost & Sullivan:

“The old model of building layer upon layer of security on top of Windows has declared bankruptcy. Organizations need a fundamentally different approach, one that starts with prevention.”⁶

He further notes:

“That thinking led us to build an immutable operating system. Because the operating system itself is designed to resist unauthorized changes, organizations can reduce their attack surface by up to 95%. From there, security becomes focused on intelligently integrating identity, endpoint management, and policy enforcement within a Zero Trust framework. That became the foundation of what we call our IGEL Preventative Security Model®. The name is intentionally descriptive because the objective is simple: to prevent attacks rather than respond after they’ve occurred.”⁶

Resilience doesn’t replace prevention. The strongest security strategies do both: reduce opportunities for attack while making recovery faster and easier when incidents occur.

Preparing for the Next Generation of Threats

As organizations accelerate AI adoption, security leaders must balance the benefits of automation and productivity with the need for stronger governance, visibility, and control.

As Walsh recently noted in an interview with TechStrong:

“AI agents are already moving from generating information to taking action — accessing data, invoking APIs, executing code and interacting with business and operational systems.”⁷

In a recent interview with Newsweek, Walsh noted that AI is not only creating new opportunities but also increasing the speed at which threats evolve:

“We have a geopolitical situation that seems to be targeting infrastructure. We have AI that’s entering into the picture, which is accelerating the velocity, how fast things are happening. What’s really happening is the urgency is being increased by the geopolitical situation and the use of AI.”⁸

As defenders work to strengthen resilience, they must contend with an environment where threats can emerge, evolve, and spread faster than ever before.

Walsh believes organizations should avoid viewing innovation and security as competing priorities, in other interview told Newsweek:

“The objective should not be to choose between innovation and security, but to ensure that AI advances no faster than our ability to observe, govern and interrupt what it does.”⁹

The lesson extends beyond AI itself. New technologies require clear guardrails, visibility into how they are being used, and controls that can scale alongside innovation.

Security Awareness Doesn’t End on October 31

Cybersecurity Awareness Month serves as an important reminder, but resilience is built through what organizations do after the month ends.

The perspectives shared by IGEL leaders may come from different areas of cybersecurity, but they all lead back to the same idea: security works best when it’s built into everyday operations rather than treated as a periodic initiative.

Organizations that embrace that mindset will be better positioned to adapt, recover, and respond to whatever comes next.

_________________

Footnotes

¹ Robert McGreevy, Fox News, Hackers could already be inside American utilities, cyber experts warn of ‘Trojan Horse’ threat (October 18, 2026).
https://www.foxnews.com/tech/hackers-already-inside-american-utilities-cyber-experts-warn-trojan-horse-threat

² Jordan Smith, Channel Insider, IGEL CTO: Shadow AI Policy Needs Endpoint Controls (September 24, 2026).
https://www.channelinsider.com/news-and-trends/igel-shadow-ai-endpoint-controls/

³ Matthias Haas, IGEL Blog, IGEL OS 12 and FIPS 140-3: Advancing Endpoint Security (April 1, 2026).
https://www.igel.com/blog/fips-advancing-endpoint-security/

⁴ Holly Silverman, Newsweek, China’s Stance on AI Regulation Amid Trump’s Post Against Formal Guardrails (September 19, 2026). https://www.newsweek.com/trump-announces-ai-force-says-hell-name-ai-czar-12464436

⁵ Jason Mafera, MD+DI, Boston Scientific Struggles With Manufacturing, Shipping Disruptions Following Cyberattack (September 3, 2026).
https://www.mddionline.com/digital-health/boston-scientific-struggles-with-manufacturing-shipping-disruptions-following-cyberattack

⁶ Sherin George, Klaus Oestermann, Chief Executive Officer, IGEL, in conversation with Jarad Carleton, Global Vice President of Research, Cybersecurity, Frost & Sullivan (September 9, 2026).
https://www.frost.com/growth-opportunity-news/security/from-detection-to-prevention-reimagining-endpoint-security-for-the-ai-era-sec02_tg41_tgl-igel_jul26_cim-sg/

⁷ Jon Swartz, Techstrong AI, Power, Profit, Superintelligence: The Three-Way War for Control of AI (September 14, 2026).
https://techstrong.ai/agentic-ai/power-profit-superintelligence-the-three-way-war-for-control-of-ai/

⁸ Holly Silverman, Newsweek, Water Supply Poisoning Risk Via AI Cyberattack Is Real, Expert Warns (2026). https://www.newsweek.com/water-supply-poisoning-risk-ai-cyberattack-real-expert-12360875

⁹ Hollie Silverman, Newsweek, Anthropic CEO Calls for AI Slowdown, Warns of Dangers of Bot Swarms (September 12, 2026). https://www.newsweek.com/anthropic-ceo-calls-for-ai-slowdown-warns-of-dangers-of-bot-swarms-12435379