Advancing Asset Protection
Data is what drives the digital economy. Customer data, intellectual property, financial transactions, cloud computing systems, and source code all together form the most precious as well as the most exposed information that companies possess. The protection of these assets cannot be delegated anymore to the old-fashioned IT department. There is a new practice that can handle this challenge today. The role of digital asset protectors – specialists and programs tailored for securing and governing the complete set of digital assets that any company has – has become crucial in defending companies against increasing threats.
No exaggeration of the magnitude of the threat is required. According to estimates, cybercrime cost companies approximately USD 10.5 trillion globally in 2025, which is expected to go up to as much as USD 15.63 trillion in 2029. The average cost of a data breach in 2024 globally was a record USD 4.88 million, which later decreased slightly to USD 4.44 million in 2025. For the USA, the cost of a data breach increased to a record-breaking USD 10.22 million in 2025. Moreover, 88% of cybersecurity incidents are caused by human error, while in 2025, one out of six cybersecurity breaches were caused by AI attacks. Given this situation, digital assets protectors do not simply defend against attacks but create systems that prevent their occurrence.
The Threat Environment Has Changed Permanently
The techniques used in cyberattacks have been developing at a much faster rate than most organizations’ countermeasures have. Gartner states that in 2025, 45 percent of organizations around the globe were subjected to attacks in their software supply chains. In 2024, the Internet Crime Complaint Centre (IC3), which is part of the FBI, in the United States recorded 859,532 cybercrime complaints, recording a loss of $16.6 billion, which is a 33 percent increase from the previous year.
Digital asset guardians guard against these attack vectors with structured governance as opposed to piecemeal patching. These entities classify digital assets according to their level of sensitivity and business importance, establish access control mechanisms according to such classification, monitor behavioural patterns for any anomalies indicating a breach of security, and keep audit trails which comply with both internal and external regulations. Entities that leverage security AI and automation, an important element of the operational framework of digital asset custodians, handle breaches 80 days quicker and save almost USD 1.9 million per breach than those without any automation at all.
Governance Is the New Perimeter
The traditional idea of a network perimeter where there is a clear boundary between the organization’s control zone and external territories is long gone for modern IT environments. Cloud infrastructures, remote workforces, integration of third parties, and mobile devices have eliminated this boundary entirely. A quarter of all incidents in 2025 occurred due to cloud compromises, and cloud identities were revealed to be 99 percent over-permissioned in comprehensive security assessments.
The role of digital asset guardians in this environment revolves around taking governance as a perimeter. This means that digital guardians develop IAM solutions, implement zero-trust architecture, perform constant vulnerability assessment, and ensure their security posture complies with such international standards as NIST Cybersecurity Framework and ISO/IEC 27001. According to the latest research, the global cybersecurity market will expand with the CAGR of 9.3 percent and grow to USD 368.19 billion by 2033.
A Real-World Model Built at Scale
JPMorgan Chase & Co. — the biggest bank in America by the amount of its assets (USD 4.6 trillion according to the figures for mid-2025) — has one of the best documented digital asset protectors programmes in the banking sector. The company spends about USD 19.8 billion a year on technology, and cyber security is a big part of this spend and is treated as a priority. It has the Cybersecurity and Technology Controls organisation headed by the Global Chief Information Security Officer in charge of identifying, monitoring and controlling the entire scope of technology risks. The bank’s CISO, Patrick Opet, made an appeal to the software industry in 2024 calling to prefer secure development to speed to market based on his bank’s experience related to the problem of supply chain vulnerabilities, in particular, the software-related incident of 2024 involving more than 451,800 individuals. Moreover, JPMorgan Chase launched an AI Model Risk Management Framework in 2024 following the EU AI Act and NIST AI Risk Management Framework with the purpose of making all its AI systems explainable, auditable and traceable. It should be noted that the deployment of cybersecurity solutions based on AI saved the company USD 100 million.
The Function Organisations Cannot Afford to Underinvest In
A massive eighty-five percent of businesses were planning to boost their cybersecurity budgets in 2024, says PwC’s Global Digital Trust Insights – and this trend only moves upwards. However, more budget will not equal increased safety by itself. The digital asset guardians are those who bring the structure to the investment in order to turn it into security: connecting technical controls with business risk, compliance needs with practice, and making an institution resilient enough to recover quickly when (not “if”) an attack takes place.
In 2025, the average breach lifecycle reduced to 241 days compared to 258 days recorded the previous year. This shows some improvement in terms of detection capabilities. But the 241-day period is still too much time for an exposure. The mission of digital asset guardians is to reduce it even further, as well as to make sure that when digital assets are being targeted, institutions holding them will be ready for such targeting.
