Strengthening Cybersecurity: Force Multiplication and Security Efficiency

Originally published on LevelBlue

In the ever-evolving landscape of cybersecurity, the battle between defenders and attackers has historically been marked by an asymmetrical relationship. Even where attackers are at a resource disadvantage, data breaches continue to rise year after year as threats adapt and evolve — leveraging AI and advanced social engineering to neutralize organizations' growing security investments.

The Asymmetry Problem

Recent data from InfoSecurity Magazine, referencing the 2023 Checkpoint study, reveals that global cyberattacks increased by 7% between Q1 2022 and Q1 2023. More troubling is the malicious deployment of AI:

"We have witnessed several sophisticated campaigns from cyber-criminals who are finding ways to weaponize legitimate tools for malicious gains."

This includes using tools like ChatGPT to help less-skilled threat actors effortlessly launch cyberattacks — dramatically lowering the barrier to entry for adversaries.

Efficiency as a Strategic Imperative

Efficiency, in cybersecurity, means achieving the greatest cumulative effect with the lowest possible expenditure of resources. This concept has been studied in military contexts for millennia:

"The strength of an army depends less upon numbers than upon efficiency." — LouTao, 1050 BC

"Make the best use of the few means at our disposal." — Carl Von Clausewitz, On War

If an organization can gain a 20% efficiency improvement, that savings can be reinvested into additional security measures — effectively achieving a net 20% improvement in security posture for the same original budget.

Force Multiplication in Cybersecurity

Force multiplication refers to a factor or combination of factors that empower assets to achieve results greater than the sum of their parts. In military terms, consider a 12-person Special Forces team that can recruit, train, and lead a 1,000-person indigenous force within months — acting as a much larger force in the eyes of the enemy.

In the cybersecurity domain, force multiplication means:

"Using various strategies, technologies, and human factors to amplify the effectiveness of security measures."

Key force multipliers for enterprise security include:

• Training and proficiency — Hiring and developing highly skilled security professionals who accomplish more per unit of effort
• Zero Trust Architecture — Limiting blast radius and lateral movement by default
• Secured Access Service Edge (SASE) — Consolidating network and security functions
• SIEM and automated monitoring — Expanding coverage without proportionally expanding headcount
• Managed Vulnerability Programs — Continuously identifying and closing exposure windows

Conclusion

As threat actors continue to employ asymmetrical strategies that render conventional security investments less effective, organizations must adapt. Borrowing from military theory, the application of force multiplication principles — through proficiency, technology, and strategic resource allocation — offers a path to getting more security value from every dollar spent.