A new IT security survey called “The Impossible Puzzle of Cybersecurity”, has revealed that IT managers are inundated with cyberattacks coming from all directions and are struggling to keep up due to a lack of security expertise, budget and up to date technology. This survey, by cybersecurity firm Sophos, polled 3,100 IT decision makers from mid-sized businesses in the US, Canada, Mexico, Colombia, Brazil, UK, France, Germany, Australia, Japan, India, and South Africa.
Lack of Security Expertise, Budget and Up to Date Technology
According to this Sophos survey, Indian IT managers reported that 32% of their team’s time is spent managing security, on average. Yet, only 8% believe they have strong team in place to detect, investigate and respond to security incidents.
Regarding budget, 81% of the respondents stated that their organization’s cybersecurity budget (including people and technology) is below what it needs to be. Having current technology in place is another problem, with 89% agreeing that staying up to date with cybersecurity technology is a challenge for their organization. This lack of security expertise, budget and up to date technology indicates IT managers are struggling to respond to cyberattacks instead of proactively planning and handling what’s coming next.
“Staying on top of where threats are coming from takes dedicated expertise, but IT managers often have a hard time finding the right talent or don’t have a proper security system in place that allows them to respond quickly and efficiently to attacks,” said Chester Wisniewski, principal research scientist, Sophos.
“If organizations can adopt a security system with products that work together to share intelligence and automatically react to threats, then IT security teams can avoid the trap of perpetually catching up after yesterday’s attack and better defend against what’s going to happen tomorrow. Having a security ‘system’ in place helps alleviate the security skills gap IT managers are facing.”
With cyber threats coming from supply chain attacks, phishing emails, software exploits, vulnerabilities, insecure wireless networks, and much more, businesses need a security solution that helps them eliminate gaps and better identify previously unseen threats.