Adaptive security is fundamental to creating trust that information is shared only as necessary and maintains its integrity. Adaptive security is also fundamental to resilience by helping to ensure that information and services are available when needed. In an adaptive security model, cybersecurity systems comprise components for prediction, prevention, detection and response.
With threats increasing in scope and impact, the shift from a compliance-based to a risk-based approach for cybersecurity and response capabilities is becoming necessary. Cybersecurity techniques are only as good as the weakest link — very often, the human element — and require improved awareness programs and embedded cybersecurity practices throughout IT organizations.
The adaptive model forgoes traditional notions of perimeter and assumes there is no boundary for safe and unsafe. This is a necessary conceptual shift, given the migration to cloud services  and Ubiquitous-X. While national policies often speak to data sovereignty, those kinds of boundaries provide limited operational security improvements.
Cumulatively, the evolving threat, rapid advances in tools and updated compliance frameworks increase pressure on government agencies to evaluate their cybersecurity capabilities and embrace adaptive security.