The Future ofCyber Resilience

CEO White Paper

Mark J. Barrenechea
OpenText CEO and CTO

The Future of Cyber Resilience

Contents
Introduction			2

New World. Rising Threats.			

4

Building Cyber Resilience			7

Protect Critical Information: OpenText Security & Protection Cloud 			

9

Ready for the Next Threat?			

13

1

Introduction
Information is our greatest strength.
It allows us to adapt to new situations in a changed world, meet higher demands,
manage more complex requirements and reach extraordinary goals. Information
empowers us to make smart decisions and lead our organizations towards growth.
Information has never been more important.
And it has never been in greater danger.
Cyber criminals are busier than ever, devising new ways to get past protective walls.
The old strategies for protecting our information are no longer enough.
It is time for new security solutions. It is time to build cyber resilience for the future.
We Live in Two Worlds
It is not hyperbolic to say that 2020 has changed everything. It is a new equilibrium.
COVID-19 has accelerated technological disruption and driven profound changes tothe ways we work, live, shop and experience our lives.
Work-from-anywhere will be a permanent part of our reality moving forward. Directto-consumer has erupted and will never be put back in the box. Contactless retail andsocial commerce are now intrinsic to the customer experience. New supply chains will
emerge. Time to Value has gained an immediacy that is here to stay.
We now live in two worlds simultaneously—the virtual and the physical.
People have migrated to the virtual world en masse since the beginning of thepandemic, straining the system with colossal demand and galactic connectivity. The
digital world is no longer an abstract concept. It is a reality.
Yet we need to stay grounded, too. In the physical world, we make scientificbreakthroughs, keep our families safe, serve our communities, care for our healthand explore our planet. It is where organizations produce the products we need,at phenomenal scale. It is where hope thrives as we watch new developments invaccines, almost every day.
The virtual and the physical are coming together—but underpinning it all, we needtrust and protection. To keep both worlds operating, cybersecurity must be Job #1.
Organizations need security in the cloud to enable work-from-anywhere. They need
intelligent threat detection and forensics to protect the edge, to keep employees anddevices safe, no matter where they are. Retailers need secure ecommerce platforms
to deliver the products and services their customers want, overnight. Hospitals need
protection for data and records so patients’ privacy is protected and they can receive
critical care.
We need to run the new equilibrium on a platform of security, protection, trust andresilience. Without this platform, both the physical and virtual worlds will fail.

2

The Future of Cyber Resilience

The Great Rethink
Rapid changes to the physical and virtual worlds have catalyzed a “Great Rethink”
across all dimensions of human existence: economic, societal, technological,
environmental, individual, geopolitical and industries. The Great Rethink is ouropportunity to shape both worlds in the new equilibrium, now and in the future.
This is how we are operating at OpenText. This is what drives our mindset, ourinnovation agenda, our customer agenda, our market agenda. We are moving forwardwith the new equilibrium.
OpenText is designing the next era of technology—technology that will enableorganizations to rethink cybersecurity and respond to new threats in the midst of
breakneck global change.
OpenText’s roadmap is centered on our five pillars and five guiding principles, working

OpenText
Information Management: Complete and Comprehensive
in tandem.
5 Pillars

5 Guiding Principles

VANCEDADINFORMATIONMANAGEMENTTE

C H N LO G YOOpenText’s Five Pillars and Five Principles

CLOUD

DIGITAL
EXPERIENCECONTENTSERVICES

Figure 1:

DATA & AI
BUSINESSNETWORKEDGEGUIDING
PRINCIPLESAPI SERVICESSECURITYCYBERRESILIENCEOur Information Management strategy encompasses Content Services, BusinessNetwork, Digital Experience, Cyber Resilience and Advanced Technologies (such as
developer tools, AI and others).
Likewise, five essential principles guide us as we rethink and evolve: Cloud, Edge,
Security, API Services, and Data and Artificial Intelligence (AI).
All of this must be secure. In fact, cyber resilience and security underpin all of ourother pillars and principles. Upon this strong foundation, OpenText’s comprehensive
platform of trust empowers Information Management in the cloud and on the edge,
driven by APIs and services, and layered with data and AI capabilities.
Without a secure, trusted platform, nothing else matters. This is the key to rethinking
cyber resilience and thriving in the new equilibrium.

3New World. Rising Threats.
Cyberattacks are a top global risk.
In the World Economic Forum’s Global Risks Report for the past two years, the top fivethreats were split into two key areas—environmental and technological. Physical andvirtual. Our two worlds, both at risk.
Cyberattacks and data fraud or theft, which were not even on the radar 10 years ago,
now represent two of the five biggest risks. Two of the five.
2010

2011

2012

2013

2014

2015

2016

2017

2018

2019

1st

Asset pricecollapse

Storms andcyclones

Incomedisparity

Incomedisparity

Incomedisparity

Interstate
conflict

Involuntary
migration

Extremeweather

Extremeweather

Extremeweather

2nd

China
economic
slowdown

Flooding

Fiscalimbalances

Fiscalimbalances

Extremeweather

Extremeweather

Extremeweather

Involuntary
migration

Naturaldisasters

Climate action
failure3rd

Chronic
diseaseCorruption

Greenhouse
Greenhouse
Unemployment
gas emissions gas emissions

Failure ofnational
governance

Climate action
failureNaturaldisasters

Cyberattacks

4th

Fiscal crises

Interstate
conflict

TerroristattacksData
fraud
or Dataor fraud or
Data
fraud
or fraud
Data
thefttheft theft
theft

5th

Globalgovernancegaps

Biodiversity
Cyberattacks
loss Cyberattacks

ClimatechangeWater crises

Water crises

Population
aging

Source: World Economic Forum, Global Risks Report 2020

Climate action State collapse
failureor crisis

Cyberattacks Unemployment

Cyberattacks

Economic

CyberattacksNatural

disasters

NaturalData fraud or Climate action
Cyberattacks
catastrophes Data theftfailurefraud orEnvironmental

Cyberattacks

theft

Categories

GeopoliticalSocietalTechnologicalThe events of 2020 have exacerbated these digital risks. We have become more
dependent than ever on technology, and this has made us more vulnerable. Security
risks and challenges continue to rise.
Endpoints have exploded. Widespread work-from-home means employees areworking on less secure home networks, often using personal devices. Most homebased offices involve exposed endpoints that are disconnected from the safety ofa corporate network or enterprise VPN. Personal devices used for work could havemultiple users, and home Wi-Fi networks are not always locked down to outside users.
The rise of the Internet of Things (IoT), coupled with work-from-anywhere, has
dramatically expanded the endpoint attack surface. Estimates suggest there are now
22 billion endpoints, expected to spike to 50 billion within the next few years.2
The great cloud migration continues. As more and more companies move into
the cloud, they are increasingly relying on third parties, giving these providers data,
credentials and access. But not all third parties are created equal, and those with
subpar cybersecurity practices leave organizations exposed.
Human behavior is also a top security challenge—our compassion, our very humanity
itself, leaves us vulnerable to phishing campaigns, social engineering and othermalicious attacks. In fact, 53% of breaches are caused by simple human error from theenterprise’s own employees.3

4

Figure 2:

Top Five Global Risks, 2010-20191

The Future of Cyber Resilience

The notion of a defensible “perimeter” has been obliterated. Assume the bad actors
are already inside. An organization is not a house with windows and doors that can belocked. The dwell time for threats in a corporate network can be as high as 800 days.4
This means the threat enters the system and waits months or years before acting.
Traditional security does not have the tools necessary to root out these lurkers before
they can do harm. Malicious insider threats—like disgruntled employees, corporate
espionage or foreign government agents—must also be guarded against.
Finally, new technologies constantly create new cyber risks. With 5G, bad actors can
exfiltrate data much faster, leaving organizations with little time to react. And within thenext five to ten years, quantum will make it possible to pick every cybersecurity lock
imaginable. Two-factor authentication will not even slow the bad actors down. In fact,
in five years, it will no longer exist.
The Costs of Cyberattacks
Cyberattacks have increased five times since the start of the pandemic.5 Throughout
the past year, organizations have seen astounding spikes in ransom amounts,
malicious files and fraudulent websites.
Figure 3:

Cyberattacks in 20206 7 8 9 10 11

5X

cyberattacks
increased during
the pandemic

121m

ransomware attacks
recorded in the firsthalf of 2020
(up 20% over 2019)$100k

average ransom
amount increase
between January andJune 2020

2,000%

increase in malicious
files with “Zoom” intheir name16 daysaverage amount ofdowntime due to aransomware
incident

2%of all COVID-19
websites created inpast few months
were malicious

These increases have massive ramifications for businesses. When an endpoint
is attacked, users and IT departments experience a 37% drop in productivity.12
Ransomware causes over 16 days of downtime, on average.13 Right now, no businesshas a single day it can lose, never mind more than two weeks! To make matters worse,
51% of businesses cite “loss of customer confidence” as a result of downtime due
to attacks.14
Nowhere is the need for cybersecurity more evident than among healthcareorganizations and research teams, which have become top targets for cyberattacks.
In the fall of 2020, the New York Times reported that a massive ransomware attack
hit eResearchTechnology, a health tech company whose software was being used inhundreds of clinical trials, including research on COVID-19 vaccines and therapeutics.
Those trials slowed almost to a halt during recovery, setting back urgently needed
medical research in the fight against the pandemic.15
5Around the same time, a hospital network with more than 400 locations in the US
suffered a ransomware attack, believed to be the largest medical attack of its kind.
Other US hospitals had their records frozen, and were forced to delay surgeries andturn away ambulances.16 And an attack on a hospital in Germany resulted in loss of life
when a patient died during relocation, as hospital systems shut down.17
We need new strategies, and we need them now.
Information GovernanceIn addition to rising cybersecurity threats, organizations that operate in multiple
countries around the world face increasing numbers of rules, standards andregulations surrounding information governance. There are currently over 100,000
such rules—and that number is growing all the time.
FINRA
ISO 27001:2013
Evidence Act
Rule 2210
Basel III Accord
Patriot Act BSI PD5000
Conflict Mineral
IncomeEU NFR Directive
PIPEDA
Tax Act
Disclosure RuleEU PharmacovigilanceSÄHKE2EU MDRUK Bribery
Directive
HIPAA
Act
GDPR
PSD2
Dodd Frank
SOX

CCPA

PCI DSS

AODA

FATCA
GLBA
FDA 21 CFRPart 11KYC/AML
LGPD

SEC 17a-4

FSMA
NARA M-19-21
TSCA
Directive

MiFID I & II, MiFIROpen Government
Information Regulations
APPI
Information
Technology Act
E-Commerce Act(Republic Act No. 8792)

GoBD
PDPA
UK Modern
TFTEA FOIA
Slavery Act
DSCSASolvency II Promotion of Access
FERC 18 CFR
to Information Act VERS
Parts 35 & 284 Anti-Corruption
DoD 5015.2
POPI
Law 12846/2013

HSR Act
Section 508(Rehabilitation Act)

■ Data Protection & Privacy Rules■ Regulated Records Retention■ eDiscovery Requirements

Telecommunications
Amendment Act
Modern Slavery Act

Public Records Act■ Information Integrity & Authenticity■ Reporting Obligations

These regulations set out requirements for personal information, credit card data,
supply chain practices, financial security systems and numerous other areas.
New technological strategies must fall in line with these regulations, to protectorganizations, employees, partners and customers.
Cyber Resilience for the Future
Tomorrow’s threats cannot be fought with yesterday’s strategies. It is time to lookat multilayered strategies and new digital capabilities in the cloud. It is time to givecybersecurity a reboot and begin building cyber resilience.

6

Figure 4:

Global Information Governance:
More than 100,000 Rules, Standards
and Regulations

The Future of Cyber Resilience

Building Cyber Resilience
Think of cyber resilience as digital fitness. It is the ability for an organization to absorb
punches and get back on its feet, no matter what threatens.
The best way to withstand evolving threats and develop cyber resilience is througha layered approach, using a proven security technology that covers multiple threat
vectors and is constantly up to date.
This technology must include both security and data protection and recovery, as wellas advanced developments in machine learning and other technologies to protect theorganization’s critical information. A multilayered approach is simply the best strategy
for keeping bad actors out and productivity up.
OpenText’s Cyber Resilience Strategy integrates these principles across several
core commitments.
Leverage thepower of cloudand edge

Secure humans, Protect against
information &known &Create a veil ofmachines
unknown threats protection for all

Provide tools torecover

Offer a unified
platform

Figure 5:

OpenText’s Cyber Resilience Strategy

Deliver at
scale

Leverage the power of “and.” We believe in the power of the word and—and today, it
is about cloud and edge. No edge, no cloud; no cloud, no edge. The first tenet of ourcyber resilience strategy is recognizing this unassailable truth. It’s your edge. Own it.
Protect it. Secure it.
Secure humans, information and machines, regardless of the perimeter. Frankly,
perimeters are disappearing altogether—but everything must be secured. The numberof endpoints is exploding, and the bad actors are already inside. OpenText creates
technologies to protect organizations in a world without castles and moats.
Protect against known and unknown threats with speed and accuracy. At its core,
cybersecurity is a challenge involving data and information. If an organization had
the information it needed to know an attack was imminent, it would not let the attack
happen. If users knew that a link in an email was unsafe, they would not click it. If theyknew that a file they downloaded from the internet was malicious, they would notopen it.

7

Organizations cannot simply throw more humans at the issue. Instead, they mustleverage advanced technologies, especially automation and AI, to sift through thevast volumes of information required to predict and detect threats. With the help ofmachines, like OpenText’s BrightCloud threat intelligence technology, organizations
can scan and analyze at (almost) the speed of light, to find new and emerging threats
early, before they can inflict debilitating damage.
Create a veil of protection for the total community. OpenText serves a wide
audience: CISOs, Chief Data Officers, R&Ms, MSPs, consumers, prosumers,
investigators, forensic workers, law enforcement and more. We are committed tosecurity and protection for all, for organizations of any size, from the smallest local
businesses to the largest global enterprises.
Provide tools to recover. No organization will run smoothly all of the time. Attacks
will happen. But OpenText has the toolset to recover data and restore operations
with efficiency, and enable digital forensics and eDiscovery to ensure accuracy andcompliance in both internal and external investigations. This real-time capability tofind, classify and analyze data is critical for cyber resilience.
Provide everything on a common platform. Our technology roadmap includes
increasing integrations in protection and security, and offering a single agent thatdelivers every component of a cyber resilience strategy: behavior analysis, digital
investigations, digital collections, threat intelligence, endpoint detection and response(EDR), data protection, cloud backup and more.
Operate at scale and build on the phenomenal successes that we have alreadydelivered to our customers around the world. Currently, OpenText has over three
exabytes of data under management. We secure 250 million endpoints. We process
15 billion URLs per day. We detect over 220,000 threats. Our cloud has 99.99%
availability—this means we only take off about eight seconds a week!

#1

in Supply Chain
Integration

100 Million#1

in Content
Services

Figure 6:

3 Exabytes
UnderManagement

End Users

250 Million

Secured Endpoints

320 Million

4 Billion

Emails Received and Sent

10 Million

Teams Meetings and Chats

2,000

IP Addresses

15 Billion

OpenText

BrightCloud URLs per Day

220,000

Private Cloud Customers

URL & IP Threats Detected per Day

11 Million

22 Million

Cloud Subscribers

75,000Enterprise Customers

OpenText at Scale

URLs Crawled per Day

99.99%

Trillions37 Billion
URLs

Cloud Uptime in Network Commerce

We are operating at galactic scale. We are ready to solve the security challenges
ahead. And we have the technology to make it happen.

8

The Future of Cyber Resilience

Protect Critical Information: OpenText Security & Protection Cloud
OpenText provides a foundation of security and protection for the virtual and physicalworlds, and helps customers build their cyber resilience, all from one place: OpenText
Security & Protection Cloud.
Security & Protection Cloud is one of our five expert, domain-oriented clouds, all ofwhich deliver stunning capabilities across key business areas:•

Content Cloud connects content to digital business to improve user productivity,
while meeting legal compliance and government requirements.

•

Business Network Cloud connects any business, person, system or thing to build
supply chains and trading ecosystems that are adaptable, ethical and sustainable.

•

Experience Cloud delivers deeply personalized omnichannel experiences tocustomers at scale.

•

Security & Protection Cloud provides organizations with the tools theyneed to keep intellectual property, customer records and sensitive financial
information protected.

•

Developer Cloud empowers developers to build applications and solution
extensions quickly and cost-effectively using service-based capabilities in
the cloud.
Figure 7:
The OpenText Cloud Platform

Security & Protection Cloud includes groundbreaking technologies from Carbonite,
Webroot and BrightCloud, as well as the incredible EnCase suite of products.
Carbonite’s solutions provide superior protection against data loss, including fromransomware, accidental deletions, hardware failures and natural disasters. Webroot’s
solutions are award-recognized for their data security capabilities and protection for
endpoints and networks. BrightCloud—a gem in the OpenText suite of products—hasredefined online threat intelligence to keep organizations safe in a connected world.
And EnCase provides unmatched digital forensics and security solutions to manage
data visibility, reveal risk, discover malware and empower response. Together with
Covisint Identity & Access Management and our eDiscovery solutions, OpenText
delivers an unbelievably comprehensive portfolio.
9Digital
Investigations &Forensics

Information
Governance, Risk &Compliance
Data Protection,
Backup &Migration

Endpoint &Network
Security
Endpoint
Detection &Response (EDR)

ThreatIntelligence
Services

The security and data protection platform for business

Digital investigations and forensics capabilities in the OpenText Cloud allow
organizations to accurately analyze digital evidence to support IT, HR, compliance andlaw enforcement investigations. Users can more easily investigate endpoints off thecorporate VPN, unlock and investigate more encrypted drive types, and collect from a
range of cloud services. With the ability to gather evidence in the field and process it inreal time, investigators can more quickly affect the outcome of a negative event.
In our latest software release, Cloud Editions 20.4, expanded OS and artifact support
ensures security, legal and law enforcement professionals have unrivaled data visibility
and investigation tools.
Endpoint and network security keeps critical systems, data and users safe fromransomware, phishing, malware and other cyberattacks. An integrated endpoint
protection strategy manages all PCs, laptops, servers, mobile devices and otherdevices, as well as offering user prevention and protection features. Anti-phishingtools use threat intelligence and real-time machine learning to determine if a URL thata user is trying to access may be a phishing site. This technology is crucial, given themassive spike in phishing since the start of the pandemic.18
The OpenText platform provides next-generation endpoint protection and
DNS protection, with a cloud-based console, fast deployment and scans, andcontextualized threat intelligence. Coupled with Security Awareness training—vital,
since humans are the weakest link in cybersecurity—Security & Protection Cloud
provides organizations with multilayered protection.
Endpoint detection and response (EDR) enables organizations to detect cyberthreats, then empowers them to respond to and recover from compromise. OpenText
EnCase Endpoint Security, embedded with Webroot’s threat intelligence, provides
360-degree visibility into the endpoint, for protection from new and unknown threats.
The platform also delivers over 250 detection rules aligned with the MITRE
ATT&CK framework, to help organizations better detect and defend against known
adversary behaviors.

10

Figure 8:

OpenText Security & Protection Cloud

The Future of Cyber Resilience

Information governance, risk and compliance tools make it easier for businesses tonavigate today’s global market, where they must contend with an expanding numberof standards and regulations. Security & Protection Cloud helps businesses identify
and protect privileged, sensitive and confidential data from inadvertent disclosure
to third parties. Managed security services help organizations keep up with evolving
regulations, through a transparent, risk-based approach to managing personal data.
Data protection, backup and migration in the cloud allows businesses of all sizes
to fill gaps in their protection. Organizations can restore a single file or an entire
environment locally or in the cloud, ensure compliance with Disaster Recovery testing,and recover from ransomware attacks to get back up and running—fast.
New to Cloud Editions 20.4, enterprises can leverage Carbonite’s solutions to protectfrom data loss on endpoints and in Microsoft 365 applications, and to ensure theavailability of critical systems at all times.
Threat intelligence services protect employees from malicious URLs, IPs, files andmobile apps, through accurate, dynamic and near real-time threat insights.
OpenText’s unified platform scans billions of IP addresses and billions of URLs acrossmillions of domains, in addition to millions of mobile apps. It takes advantage ofmachine learning to classify and categorize each according to the threat it represents
to business.
With our most recent release, BrightCloud Threat Intelligence services strengthen the
reputation capabilities offered by EnCase Endpoint Security in the enterprise.
OpenText EnCase & Digital Investigations in the Cloud
OpenText’s cyber resilience strategy includes a strong commitment to digital
investigations and forensics. Our technologies enable law enforcement, corporations
and government agencies to collaborate, work efficiently and get results.
We are helping first responders, police departments and police leaders to ensurethat information is captured and available when it is needed most. We enable
investigators and forensic examiners to complete more cases and find evidence—theneedle in the haystack—faster.
Our solutions also help corporations with discreet and remote digital investigations
on and off the network, to protect employees, investigate misconduct, and scrutinize
IP theft, fraud, security incidents and data exfiltration. OpenText’s technology helps
investigators get to the bottom of negative events.
And we are helping government agencies with their own investigations into top
security concerns—counterintelligence, human intelligence, anti-terrorism and humantrafficking—to make the world safer for all.
We are also committed to growing our partnerships with other organizations to ensurethat our gold-standard technologies are widely available. We recently announced an
expansion of our partnership with Microsoft: OpenText EnCase Forensic and EnCase
Endpoint Investigator are now certified on Microsoft Azure.

11

As more and more organizations shift operations to the cloud, digital evidence
often originates from or involves cloud sources. To access all digital evidence andreach accurate conclusions, investigative teams require compatibility and access tocloud sources.
Through Azure and EnCase, organizations can investigate devices anytime, anywhere,with less reliance on the corporate network or VPN. Law enforcement and corporate
investigators can more easily collaborate across divisions and organizations, enhance
evidence processing, investigate in cloud environments, and adjust more quickly tothe needs of a remote workforce.

EnCase for Digital Investigations

Figure 9:

Enhance evidence
processing

Collaborate
more easily

Investigate
devicesanywhere

EnCase for Digital Investigations

Investigate cloudenvironments

Adjust quickly tothe needs of aremote workforce

Comprehensive. Redefined.
Building cyber resilience requires a partner who has a proven track record ofaddressing organizational data at scale and can offer a comprehensive platform
for security.
With Security & Protection Cloud, organizations can detect, prevent and recover fromattacks, accidents and disasters that could otherwise put them out of business. It
provides multilayered security that seamlessly fits into all business environments, andeffortlessly ensures that data, users, devices and networks are secure.
Security & Protection Cloud is enterprise-ready. The same platform serves small andmedium-sized businesses, as well as cybersecurity experts and consumers. One
service for all. The most comprehensive platform on the market.

12The Future of Cyber Resilience

Ready for the Next Threat?
I hack the future. The things that we don’t see in technology
are the things that come back and bite us.
–Tarah Wheeler, Cybersecurity Policy Fellow19
OpenText is committed to cyber resilience, to delivering outstanding solutions acrossforensics and investigations, endpoint detection and response, cyber protection anddata protection.
And there are no limits on how far we will innovate.
Going forward, OpenText will release more APIs, new machine learning solutions forinvestigative insights, and more modern sources for forensic artifacts, including MS
Teams and Zoom, so that users have access to all the sources they need in order to
respond to threats and investigate negative events.
We will persist in building and delivering a unified platform where all security andprotection technologies come together in a single agent, with even deeper integration
with BrightCloud Threat Intelligence, custom automated response actions, andmanaged detection and response.
We will increase endpoint visibility and offer improved dashboards, and we will add
new support for data protection with server backup for MSPs, expanded platform
support, and cloud recovery options, to make protection and recovery more seamlessthan ever.
Figure 10:
SingleAgent

Forensics andInvestigations• Public APIs
• Machine learningfor investigative
insights• Triage workflows• Modern forensic
artifacts

ThreatIntelligence

Endpoint Detection
and Response

OpenText’s Commitment to Cyber
Resilience

Cyber
Resilience

Cyber Protection

Data Protection• Deeper integration• Increased• Server backup for• Custom automated• Improved
dashboards• Expanded platform

with BrightCloudThreat Intelligence
response actions• Managed detection
and response

endpoint visibility• Cyber resilience

MSPs

support• Cloud recovery
options

We will continue to smash the expectations of the RMMs and MSPs we serve, with theability to easily deploy, manage and calibrate capabilities through our consoles.

13

And we will further enhance our services for law enforcement and first responders,forensics and investigators, legal professionals, and the defense and intelligencecommunities. Every crime involves some sort of technology, and excellent digitalforensic capabilities are essential to gaining a full picture and improving the outcomeof events.
We are a trusted partner in the journey into the new equilibrium, and we will work withour customers to help them transform, secure the physical and virtual worlds, andbuild their cyber resilience. Helping build a safer world is in our DNA.
Do not wait. Cyber resilience must be Job #1.
It cannot be Job #6. It cannot get lost in day-to-day operations and to-do lists. It must
be a chief concern in everything that organizations do, at a foundational level. The
technologies of today are dying. Get current and stay current.
Times of uncertainty require bravery, empathy and foresight. Such times requireleaders—at all levels—who can see and anticipate the advantages of the physical anddigital worlds, but also the risks.
In the new equilibrium, where the next threat is often unknown, the best risk
management strategy is cyber resilience. With it, organizations can ensure theirsustainability, and meet the future with agility and growth.

14

The Future of Cyber Resilience

Endnotes“ The Global Risks Report 2020,“ World Economic Forum, January,
2020, http://www3.weforum.org/docs/WEF_Global_Risk_Report_2020.
pdf (accessed November 2020).

1

2

3

 om Warren, “Microsoft’s CEO looks to a future beyond Windows, iOS,
T
and Android,” The Verge, January 21, 2020, https://www.theverge.
com/2020/1/21/21071108/microsoft-ceo-satya-nadella-iot-windowsios-android-future (accessed November 2020).
 eera Narendra, “Human error remains the main cause of dataM
breaches,” PrivSec Report, June 20, 2019, https://gdpr.report/
news/2019/06/20/human-error-remains-the-cause-of-data-breaches/(accessed December 2020).

“ 2019 Mid-market Threat and Incident Response Report,” Infocyte, July
2020, https://www.infocyte.com/resources/mid-market-threat-andincident-response-report/ (accessed December 2020).

4

5

6

 J Cranford, “Announcing OpenText Security and Protection Cloud,”
J
OpenText, October 26, 2020, https://blogs.opentext.com/opentextsecurity-cloud/ (accessed November 2020).
I bid.

“ Ransomware Attacks Fracture Between Enterprise and Ransomwareas-a-Service in Q2 as Demands Increase,” Coveware, August 3, 2020,
https://www.coveware.com/blog/q2-2020-ransomware-marketplacereport (accessed December 2020).

7

8

15

 ichole Perlroth, “Clinical Trials Hit by Ransomware Attack on HealthN
Tech Firm,” New York Times, October 3, 2020, https://www.nytimes.
com/2020/10/03/technology/clinical-trials-ransomware-attackdrugmakers.html (accessed November 2020).

16

 icole Perlroth, “Officials Warn of Cyberattacks on Hospitals as
N
Virus Cases Spike,” New York Times, October 28, 2020, https://www.
nytimes.com/2020/10/28/us/hospitals-cyberattacks-coronavirus.
html (accessed November 2020).

 atrick Howell O’Neill, “A patient has died after ransomware hackers
P
hit a German hospital,” MIT Technology Review, September 18,
2020, https://www.technologyreview.com/2020/09/18/1008582/apatient-has-died-after-ransomware-hackers-hit-a-german-hospital(accessed November 2020).

17“ COVID-19 Clicks: How Phishing Capitalized on a Global Crisis,”
Webroot and Carbonite, September 2020, https://mypage.webroot.
com/covid-clicks.html (accessed December 2020).

18“ From Halo to Hacking: New Speaker and Cybersecurity Expert Tarah
Wheeler Is Leading the Charge for Women in Tech,” Lavin, September
26, 2017, https://www.thelavinagency.com/news/introducing-tarahwheeler (accessed December 2020).

19

I bid.

“ SonicWall’s Mid-year Cyber Threat Report finds Malicious Microsoft
Office Files on Rise, Ransomware Up in US, Globally,” SonicWall, July23, 2020, https://www.sonicwall.com/news/sonicwalls-mid-year-cyberthreat-report/ (accessed December 2020).

910

 yle Fiehler, “There are Savings to be Had in Cybersecurity. JustK
Not Where You Might Think,” Webroot, July 13, 2020, https://www.
webroot.com/blog/2020/07/13/there-are-savings-to-be-hadin-cybersecurity-just-not-where-you-might-think/ (accessed
December 2020).

I bid.

11“ The Third Annual Study on the State of Endpoint Security Risk,”
Ponemon Institute, January 2020.

12“ Ransomware Attacks Fracture Between Enterprise and Ransomwareas-a-Service in Q2 as Demands Increase,” Coveware, August 3, 2020,
https://www.coveware.com/blog/q2-2020-ransomware-marketplacereport (accessed December 2020).

13“ The Third Annual Study on the State of Endpoint Security Risk,”
Ponemon Institute, January 2020.

14

15

Cautionary Note Regarding Forward-Looking Statements
Certain statements in this presentation, including statements about the focus of Open Text Corporation (“OpenText” or “the Company”)
on growth, initiatives, the impact of COVID-19, anticipated benefits of our partnerships and next generation product lines, thestrength of our operating framework and balance sheet flexibility, continued investments in innovation, go-to-market and strategicacquisitions, our capital allocation strategy, creating value through investments in broader Information Management (IM) capabilities,
the Company’s presence in the cloud and in growth markets, expected growth in our revenue lines, total growth from acquisitions,innovation and organic initiatives, improving operational efficiency, its financial condition, scaling OpenText to new levels, and othermatters, may contain words such as “anticipates”, “expects”, “intends”, “plans”, “believes”, “seeks”, “estimates”, “may”, “could”, “would”,“might”, “will” and variations of these words or similar expressions are considered forward-looking statements or information underapplicable securities laws. In addition, any information or statements that refer to expectations, beliefs, plans, projections, objectives,
performance or other characterizations of future events or circumstances, including any underlying assumptions, are forward-looking,and based on our current expectations, forecasts and projections about the operating environment, economies and markets in which
we operate. Forward-looking statements reflect our current estimates, beliefs and assumptions, which are based on management’s
perception of historic trends, current conditions and expected future developments, as well as other factors it believes are appropriate
in the circumstances, such as certain assumptions about the economy, as well as market, financial and operational assumptions.
Management’s estimates, beliefs and assumptions are inherently subject to significant business, economic, competitive and otheruncertainties and contingencies regarding future events and, as such, are subject to change. We can give no assurance that such
estimates, beliefs and assumptions will prove to be correct. Such forward-looking statements involve known and unknown risks,
uncertainties and other factors and assumptions that may cause the actual results, performance or achievements to differ materially.
For additional information with respect to risks and other factors which could occur, see the Company’s Annual Report on Form 10-K,
Quarterly Reports on Form 10-Q and other securities filings with the Securities and Exchange Commission (SEC) and other securities
regulators. Readers are cautioned not to place undue reliance upon any such forward-looking statements, which speak only as of thedate made. Unless otherwise required by applicable securities laws, the Company disclaims any intention or obligation to update orrevise any forward-looking statements, whether as a result of new information, future events or otherwise.

16

The Future of Cyber Resilience

About OpenText
OpenText, The Information Company, enables organizations to gain insight through market leading information management
solutions, on-premises or in the cloud. For more information about OpenText (NASDAQ: OTEX, TSX: OTEX) visit www.opentext.com.

Contact
Sales
Email: sales@opentext.com
Partners
Email: partners@opentext.com
Media Relations
Email: publicrelations@opentext.com

opentext.com/contact

Copyright ©2020 Open Text. OpenText is a trademark or registered trademark of Open Text. The list of trademarks is not exhaustive of other trademarks. Registered trademarks, product names, company names,
brands and service names mentioned herein are property of Open Text. All rights reserved. For more information, visit: http://www.opentext.com/2/global/site-copyright.html