The basic concepts of the application security didn't change a lot in the past decade however the cybersecurity incident numbers increased a magnitude.

Security is the base of the trust which all company needs, not only the finance sector.

The fundamental problem with the current application patterns they have a focus in a silo mindset, not in an integral way. We want to protect elements, not flows. With the focus on smaller pieces, we miss the great picture. The majority of this problem not only comes from technology but more from an organizational level. For a perfectly secure environment, you need transparency for the processes which interweave the whole organization. The next level of problems comes, when we put black boxes to our environment from different vendors. These boxes create new silos in the already silo suffering environment.

To make a transformational plan, first, we need to create the operational model which we want to reach. To make a clear vision, we must be able to word in a sentence our thoughts.

Now here is mine:

In this ecoSystem everyone has the proper authorization for their work, but only when they are in a process which needs it!Let's get into the details, to make clear this concept! I think the fundamental idea based on a Matrix quote: "Everything That Has A Beginning Has An End"

This quote symbolizes great the concept. Every business or IT process which starts, it also has an end. In this concept, we give authority to those, who have the right to start a process, but they don't have authorization for the middle steps until they reach that points.

This concept helps a lot, to minimize the authorizations when they not in use. Like typically the Sudo concept on *NIX/BSD systems.

Imagine the same for the operation! If your DevOps team members are able to start a process when they have work on operating system level. Without a process start they physically not able to login to any server.

Imagine how much this concept helps with activity and behavior-based analysis of the security? How much predictable the steps in the processes?

I think the future is integral. We need to break barriers and build transparent processes.