DWS Group

Frankie is an award-winning CISO in the financial industry. He has been featured on the Nasdaq Tower of New York Times Square as the 2024 Global CISO 100 award winner and cover page of Enterprise Security Magazine (2022 APAC special edition). He also received awards including Global Top 100 leaders in InfoSec, World CIO 200, and IDG CSO30 & CIO100 ASEAN.

Sun Tzu was an ancient Chinese general, philosopher, and strategist who lived in the 5th or 6th century B.C. He is credited as the author of The Art of War, a bestseller book that has transcended 2,000 years. The book has become a kind of Rosetta Stone of military theory and has translated well beyond the battlefield to gain prevalence in modern business schools worldwide and now Cyber Threat Intelligence.

Maxim 1 Form Sun Tzu - “Know The Enemy And Know Yourself, And You Can Fight A Hundred Battles Without Disaster.”

For Cyber Threat Intelligence, “knowing the enemy” means understanding threat actors’ tactics, techniques, procedures (TTPs), and motivations. Tools like threat intelligence platforms, open-source intelligence, and dark web monitoring could enable security teams to gather actionable insights on adversaries. Simultaneously, “knowing yourself” involves knowing one’s crown jewels by mapping one’s digital footprint and prioritizing critical assets. Together, these efforts create a comprehensive picture of the cyber battlefield, enabling informed decision-making and proactive defense.

Maxim 2 Form Sun Tzu - “Winning Without Fighting.”

Sun Tzu emphasized that the highest form of warfare is to win without fighting. This philosophy translates seamlessly to cybersecurity, where the goal is to prevent breaches before they occur.

Cyber threat intelligence plays a pivotal role in proactive defense by enabling organizations to anticipate and neutralize threats early in their lifecycle. Through threat feeds, malware analysis, and industry cyber threats collaboration, security teams can identify patterns, predict attacker behavior, and deploy countermeasures before the breach occurs.

Maxim 3 Form Sun Tzu - “Speed Is The Essence Of War.”

In the current fast-paced world of cybersecurity, speed and agility are critical. Ransomware campaigns can paralyze organizations in hours, not days or weeks anymore, and zero-day vulnerabilities can be exploited before patches are deployed. So, cyber defense requires the ability to detect, analyze, and respond to cyber threats efficiently.

Maxim 4 Form Sun Tzu - “He Who Relies Solely On Warlike Measures Shall Be Exterminated; He Who Relies Solely On Peaceful Measures Shall Perish.”

Sun Tzu emphasized collaboration and intelligence sharing. Cyber is not a silo, and it’s always a Team Sport. Threat intelligence sharing among organizations, industries, and even governments strengthens collective defenses and reduces the likelihood of successful attacks. Initiatives like the Information Sharing and Analysis Centers (ISACs) and public-private partnerships enable stakeholders to pool resources and exchange critical insights. Such unity is especially important in combating sophisticated actors like nation-states and cybercriminal organizations that exploit isolated defenses.

Maxim 5 Form Sun Tzu - “He Will Win Who Knows When To Fight And When Not To Fight.”

Sun Tzu emphasized the importance of resource allocation and advised leaders to balance risks and rewards. For cybersecurity teams, this means adopting a risk-based approach to defense. Limited budgets and resources make it impossible to address every threat or patch every vulnerability. Cyber threat intelligence helps inform decisions by providing context around emerging risks and adversary capabilities. By focusing on highvalue areas and mitigating the most significant risks, organizations can achieve maximum protection with minimal waste.

"Advanced Persistent Threats (Apts), Ransomware-As-A-Service (Raas), And Supply Chain Attacks Are Just A Few Examples Of Modern Challenges. To Stay Ahead, Organizations Must Continuously Innovate And Refine Strategies".

Maxim 6 Form Sun Tzu - “All The Warfare Is Based On Deception.”

Deception has been a cornerstone of military strategy, and its relevance in cybersecurity is undeniable. Cyber defenders could also leverage this kind of tactics to fight bad actors. For example, honeypots could be used to lure attackers into controlled environments. Tools could mimic real systems, enticing adversaries to reveal their methods, while defenders could gather valuable intelligence and advantage.

Maxim 7 Form Sun Tzu - “Do Not Repeat The Tactics Which Have Gained You One Victory, But Let Your Methods Be Regulated By The Infinite Variety Of Circumstances.”

Sun Tzu emphasized the need to adapt to changing circumstances. In cybersecurity, the threat landscape is constantly evolving. New technologies, such as quantum computing and AI, introduce both opportunities and risks. Advanced persistent threats (APTs), ransomwareas-a-service (RaaS), and supply chain attacks are just a few examples of modern challenges. To stay ahead, organizations must continuously innovate and refine strategies. Threat intelligence enables this adaptability by providing insights into emerging trends, vulnerabilities, and attacker methodologies. By embracing change, defenders can make informed decisions in this evershifting environment.

Take Away

Sun Tzu’s The Art of War offers timeless wisdom for navigating the complexities of modern cyber threat intelligence and cyber defense. As cyber threats continuously grow in volume and sophistication, Sun Tzu’s teaching reminds us to understand the enemy, leverage alliances, and embrace innovation so organizations can achieve cyber resilience and security in a risk-based, balanced manner.

(Disclaimer: the views expressed in the article are solely personal and not connected to DWS Group).