As more businesses experience a digital transformation and continue to store consumer information in the cloud, cybersecurity risks are a growing concern for online users, companies, and online shoppers.
See also: Research: Google Chrome is the most vulnerable browser of 2022
According to Foundry's 2022 Security Priorities study, which surveyed nearly 900 cybersecurity leaders from around the world, 90% believe their organization is not doing enough to address cyber risks.
Hackers are evolving their techniques and are increasingly targeting universities, hospitals, large businesses , and critical infrastructure.
See also: City of Tucson reveals data breach
The growing problem facing companies today is that technological threats are evolving too quickly and cybersecurity personnel are failing to keep up. Combine that with the fact that many companies are understaffed in their cybersecurity departments, and many businesses are highly vulnerable to cyberattacks.
45% of IT executives rely on existing staff to take on more responsibilities, while 45% use automation technology and 42% outsource their security functions.
Cybersecurity leaders surveyed by Foundry agreed that automation is a key tool for improving incident response and retaining skilled security staff. For example, 34% of companies are considering SOAR (Security Orchestration, Automation, and Response) technology, which combines human and machine power to respond to incident.
Human error
Employee errors remain the leading factor behind IT security fears, Foundry found: 34% of respondents said non-malicious user error was the leading cause of cybersecurity incidents – down from 44% in 2021. This factor was followed by security vulnerabilities (28%), unpatched software vulnerabilities (26%) , and software supply chain breaches, which accounted for 17% of incidents.
Cybersecurity leaders struggle to convince all or part of their organization of the seriousness of cyber risks and struggle to find and retain the right security personnel to keep their organization safe .
Additionally, security leaders report that their organization fails to invest enough in technology, people or budget to properly address security risks, and that security is often an afterthought when developing applications. Cybersecurity training is also lacking at all levels of staff, according to the report.
See also: Uber: Former executive found guilty of concealing data breach
Looking ahead, 51% of respondents said that endpoint security protection for laptops, desktops and servers is currently in the works to prevent future security risks. Security awareness training is also on the agenda, with 46% of respondents planning to invest more in training.
More than a fifth (22%) of security leaders plan to upgrade their organization’s existing technology , including better multi-factor authentication , while 21% plan to upgrade data backup and recovery technologies .
Meanwhile, 32% are researching zero-trust technologies, an approach to IT systems where a network does not automatically trust a device just because it is used internally.
Information source: zdnet.com
