The dangerous disconnect between security teams and the board

  • 6 October 2014
  • 2 replies
  • 2 views

Userlevel 7
Badge +54
An interesting read considering the increases prevalence of hacks concerning big business.
 

Are boards getting the advice they need?

By (ISC)² | Published 11:21, 06 October 14
 
PwC’s Global State of Information Security Survey contains a number of striking points, starting with the disconnect between the board and security teams in businesses across the globe.
Security is now one of the biggest challenges that businesses face. Executives voice increasing concern around security and data privacy, yet spending in this area remains flat. According to PwC, global information security budgets decreased 4 percent from 2013 and have stalled at 4 percent or less of IT budgets for the past five years.
I wonder whether this disconnect between concern and budget is because business executives aren’t getting the advice they need to make the right calls on what and where to invest. It’s noticeable that the spending priorities of CISO referenced in the report are mainly security tools – perhaps this money could be better invested elsewhere.
 
Full Article

2 replies

Userlevel 7
Well businesses are waking up to the fact that cyber security is a important aspect of their business. But again dollars and cents is where they are not focusing on they need to put this as a priority in their budget and beef up their protection.
Userlevel 7
The following article is a update
The impact of disconnected security strategies
By HNS Staff/ Posted on 17 October 2014.
 
39% of organizations’ IT departments are spending too much time managing their security network and manually tackling threats, according to McAfee.

Almost a third of IT decision makers (31%) believe their organization is using too many security providers to manage the ever-evolving threat landscape. More than half (52%) claimed to be using five or more different security solutions within their network.

Companies with multiple, siloed security solutions often present security postures that are easily compromised, putting them at greater risk for a data breach. According to the study, 37% of IT decision makers believe point security solutions that don’t share information can lead to threats going unnoticed, and 31% stated this lack of integration meant threats were sometimes not passed on to where they could be contained.

The absence of integration and compatibility between point solutions has brought into question the overall security of an organization’s network with 73% either unable to say, or in agreement that siloed solutions has decreased their security levels.

 
 
Full Article

Reply