Cisco 2019 CISO Benchmark Study Reports Increased Vendor Consolidation
- Forty-four percent have increased investment in security defense technologies.
- Thirty-nine percent have security awareness training among employees.
- Thirty-nine percent focused on implementing risk mitigation techniques.
- The trend away from point products to vendor consolidation continues— In 2017 54 percent of respondents cited 10 or fewer vendors in their environment. This number has risen to 63 percent.
- In many environments, multiple vendor solutions aren’t integrated, and therefore don’t share alert triage and prioritization. The survey showed that even those CISOs with fewer point solutions could better manage their alerts through an enterprise architecture approach.
- The most collaborative teams lose the least money. Elimination of silos shows a tangible financial upside:
- Ninety-five percent of security professionals reported that their networking and security teams were very or extremely collaborative.
- Fifty-nine percent of those who stated that their networking and security teams were very/extremely collaborative also stated that the financial impact from their most serious breach was under $100,000 – the lowest category of breach cost in the survey.
- There is more confidence in cloud-delivered security and in securing the cloud.
- Ninety-three percent of CISOs reported that migrating to the cloud increased efficiency and effectiveness for their teams.
- The perception of difficulty of protecting cloud infrastructure has decreased—52 percent in 2019 compared to 55 percent in 2017.
- “Cyber fatigue” – defined as virtually giving up on staying ahead of malicious threats and bad actors - is down from 46 percent in 2018 to 30 percent in 2019.
- Employees/users continue to be one of the greatest protection challenges for many CISOs—having an organizational process that starts with security awareness training on day one is essential.
- Only 51 percent rate themselves as doing an excellent job of managing employee security via comprehensive onboarding and processes for transfers and departures.
- Email security remains the number one threat vector.
- Phishing and risky user behavior (e.g. clicking malicious links in email or websites) remains high and is the top concern for CISOs. The perception of this risk has held steady for the past three years between 56 to 57 percent of respondents. Coupled with low levels of security-related employee awareness programs, this represents a possible major gap that the security industry can help address.
- Alert management and remediation remains challenging. A reported drop in remediation of legitimate alerts, 50.5 percent in 2018 to 42.7 percent this year, is concerning given that many respondents are moving toward remediation as a key indicator of security effectiveness.
- Security measurements are changing. The number of respondents who use mean time to detection as a metric for security effectiveness decreased from 61 percent in 2018 to 51 percent in 2019 on average. Time to patch has also dropped in focus from 57 percent in 2018 to 40 percent in 2019. Time to remediate has risen as a success metric: 48 percent of respondents cited this compared to 30 percent in 2018.
- Base security budgeting on measured security outcomes with practical strategies coupled with cyber insurance and risk assessments to guide your procurement, strategy, and management decisions.
- There are proven processes that organizations can employ to reduce their exposure and extent of breaches. Prepare with drills; employ rigorous investigative methods; and know the most expedient methods of recovery.
- The only way to understand the underlying security needs of a business case is to collaborate across siloes – between IT, Networking, Security and Risk/Compliance groups.
- Orchestrate response to incidents across disparate tools to move from detection to response faster and with less manual coordination.
- Combine threat detection with access protection to address insider threat and align with a program like Zero Trust.
- Address the number one threat vector with phishing training, multi-factor authentication, advanced spam filtering and DMARC to defend against Business Email Compromise.
Home >> Business and Economy Section
Emirates expands its Premium Economy offering on services to Male and Colombo
du launches Experience X internship program to empower UAE national youth
Experience Art, Adventure, and Heritage at Dubai Culture's Summer Camps 2025
DAFZ Announces Opening of Fakeeh Health's First Smart Clinic in Dubai
Big Wins Continue with PrivilegePLUS at Mercato & Town Centre Jumeirah!
Christophe Robin's Summer Travel Essentials for Good Hair Days
Dubai Airports launches DXB Greet & Go: a smart, QR code-based pickup service at Terminal 3
Dubai Sports World Returns for Action-Packed August Edition
The World Between Lines and Symbols: An Interactive Art Workshop at Mohammed Bin Rashid Library