Cybersecurity in the cloud: addressing key risks and future challenges in 2025

Rachael Shattock

Event Director, Nineteen Cyber Series Nineteen Group

With cybercriminals using AI-driven attacks and ransomware-as-a-service, organisations must take a proactive approach to security to protect their networks and sensitive data.

As businesses increasingly move their operations to the cloud, cybersecurity remains a critical challenge. Cloud adoption offers benefits such as scalability, remote access and cost efficiency; but it also presents risks, including data breaches, insider threats and compliance challenges.

Regulatory complexity and cyber resilience

The evolving regulatory landscape adds another layer of complexity. Businesses must navigate frameworks such as GDPR (General Data Protection Regulation), DORA (Digital Operational Resilience Act) and NIST2 (National Institute of Standards and Technology Cybersecurity Framework 2.0) to ensure compliance while maintaining operational efficiency. Discussions around cyber resilience, risk management and emerging threats are more crucial than ever in shaping the future of digital security.

National Cyber Security Show in April

The National Cyber Security Show (8–10 April 2025, NEC Birmingham) brings together industry experts to explore these challenges. Attendees will gain insights into the latest threats, best practices for cloud security and strategies to strengthen their cybersecurity defences.

The rising cyber threat landscape

Cybercriminals are constantly adapting, using deepfake technology, AI-generated phishing scams and automated attacks to breach defences. The growing sophistication of threats has made threat intelligence and real-time monitoring essential for businesses looking to stay ahead of attackers.

One key focus area is Zero Trust Architecture, which ensures that all users and devices must be continuously verified before accessing networks. Another major concern is supply chain security, as attackers increasingly target third-party providers to gain access to critical systems.

Cybercriminals are constantly adapting, using
deepfake technology, AI-generated phishing
scams and automated attacks to breach defences.

Cloud security and compliance in a changing landscape

While cloud adoption brings flexibility, it also creates new vulnerabilities. Misconfigurations, weak access controls and lack of encryption continue to be primary causes of cloud-related breaches. Businesses must adopt multi-factor authentication, continuous monitoring and robust encryption to reduce exposure to cyber threats.

Compliance remains another significant challenge. As global regulations evolve, businesses must stay ahead of new requirements and ensure their security measures align with industry standards. Karoliina Ainge, former Head of Estonia’s Cybersecurity Policy, will provide key insights into how governments and international bodies are shaping cybersecurity regulations on day one at the show.

Closing the cybersecurity talent gap

The shortage of skilled cybersecurity professionals is an ongoing issue, making it harder for businesses to defend against sophisticated attacks. As threats grow more complex, the demand for expertise in risk management, incident response and compliance continues to rise. Organisations must invest in training, upskilling and knowledge-sharing initiatives to strengthen their security teams.

Industry leaders are calling for greater collaboration between businesses, governments and educational institutions to develop the next generation of cybersecurity professionals. Addressing this skills gap will be essential to securing digital infrastructure in the years ahead.

Preparing for the future of cybersecurity

Cyber threats are evolving rapidly, requiring businesses to shift from reactive to proactive security strategies. Implementing advanced threat detection, compliance frameworks and a strong security culture will be essential to ensuring long-term resilience.