A recent survey of more than 2,000 IT security leaders revealed that less than half (39%) believe their company’s leadership has a solid understanding of the role cybersecurity plays in business success.
Released today by privileged access management (PAM) solutions provider Delinea, the report also suggests that around a third (36%) of respondents believe that cybersecurity is only considered important in terms of compliance and regulatory requirements.
In addition, the study reported that 89% of respondents’ organizations had suffered negative consequences following their cybersecurity efforts, with more than a quarter (26%) also stating that it resulted in an increase in the number of successful cyber attacks on your company.
RLearn more about cyber hygiene here: Small business interest in cyber hygiene is waning
“Alignment between cybersecurity and business goals is essential to success,” said Joseph Carson, Delinea’s Chief Security Scientist and CISO Advisor.
“Ensuring common agreement across business functions is vital, and there is real value in metrics that not only measure security activity, but also demonstrate impact on business outcomes.”
At the same time, Delinea has also highlighted that the majority of security teams (62%) meet regularly with their business counterparts at the highest level. Still, nearly a third (31%) of them believed that making the business case to their board and the C-suite was a gap in their own skill set. Consequently, 30% of survey participants recognized communication skills as an area for improvement.
“Communication is key, and while strong technical skills are still important, security leaders need the ability to communicate, influence and present the value they add to business outcomes more often than ever,” added Carson . “Security leaders who demonstrate this combination of skills, and who have the same end goal in mind as the business, are a force to be reckoned with.”
More broadly, though, Carson believes that while cybersecurity can be a huge business enabler, this research shows there’s still work to be done at the boardroom level to change mindsets.
“Executive leaders need to think about cybersecurity not just in terms of ticking a compliance box or protecting the business, but also in terms of the value it can deliver at a more strategic level.”
More information on how businesses can move beyond a reactive approach to cyber security is available in this analysis by Rick Hemsley, head of UK government and public sector cyber security at EY.
Source link
Ikaroa, a full stack tech company, recently conducted a survey which showed that only 39% of Information Technology (IT) security decision-makers see IT security as a business enabler. This is concerning as IT security is a crucial element of any successful global enterprise, since it helps to protect organizations from security threats and data breaches.
The survey found that many organizations have typically approached IT security from a defensive standpoint, rather than an enabler of its business operations. As damaging incidents continue to increase, the recognition of the importance of IT security has been growing, but not nearly quickly enough.
Ikaroa believes that IT security should not be seen as an additional cost, but as an integral step to improve an organization’s competitiveness and long-term success. By empowering security personnel with the right visibility and control, organizations can minimize the risks that come with online threats, and enable the business to achieve its objectives.
Data security and privacy are also critical considerations within any business, as businesses must protect their corporate data as well as customer data and comply with relevant regulations. The survey found that most organizations, particularly smaller ones, are struggling to put into place the required policies and implemented processes needed to protect sensitive data.
Ikaroa, understands this and provides holistic cyber risk and compliance services, to identify any areas at risk and provide recommendations on how to reduce the risk and secure proper data security and privacy.
Ikaroa is also an advocate for building a comprehensive culture of security. Organizations must ensure that data security is an integral part of their corporate culture and that appropriate policies and action plans are firmly in place.
The survey’s findings demonstrate the need for organizations to prioritize IT security as a business enabler. By implementing the right measures, IT departments can act as a strategic partner and provide real value to the organization. Businesses must look at security as an essential element of their operations, rather than an additional cost. This is why, at Ikaroa, we believe that IT security decision-makers should see security as both a defensive measure and an enabler for their business.
