We would like to keep you up to date with the latest news from Digitalisation World by sending you push notifications.
Digital Newsletter
Each week our editor Phil Alsop rounds up the most popular articles, videos and expert opinions. We compile this into a Digital Newsletter and send it straight to your inbox every week.
Digital Magazines
We'll let you know each time a new edition of Digitalisation World is released so that you're always kept up-to-date with the latest and greatest news and press releases.
Video Magazines
The Digitalisation World Video magazine contains the latest Zoom interviews with experts in the industry.
Digital transformation has created a complex computing environment of Cloud, DevOps, mobility and IoT, where everything is connected as part of the new, modern attack surface. This has created a massive gap in an organisation’s ability to truly understand its Cyber Exposure at any given time. The research -- which surveyed 2,410 IT and infosec decision-makers in six countries -- found less than one third (29 percent) of respondents reported having sufficient visibility into their attack surface (i.e. traditional IT, cloud, containers, IoT and operational technology) to effectively reduce their exposure to risk. To further complicate this lack of visibility, more than half of respondents (58 percent) said their security function lacks adequate staffing to scan for vulnerabilities in a timely manner, with only 35 percent scanning when it’s deemed necessary by an assessment of risks to sensitive data.
Together, these data points reveal that the tools and approaches organisations are using fail to provide the visibility and focus required to manage, measure and reduce cyber risk in the digital era.
Of those organisations that measure the business costs of cyber risk, 62 percent are not confident their metrics are actually accurate. Thus, decisions about the allocation of resources, investments in technologies and the prioritisation of threats are being made without critical information — such as the costs of IP theft, loss of revenue or loss of productivity. Organisations admit to not using the key performance indicators (KPIs) they consider important to assessing and understanding cyber risks:
This lack of rigor leaves boards of directors in the dark about the true cost of cyber risks to their organisations. Without confidence in the accuracy of their measures, CISOs and other security executives are reluctant to share critical information about the business costs of cyber risks with their boards.
“In today’s digital economy, cyber risk equates to business risk. It’s shocking to learn that organisations are suffering business-impacting cyber events yet are struggling to accurately measure the resulting financial cost,” said Bob Huber, CSO, Tenable. “This study powerfully highlights that most organisations have not implemented security metrics that reflect cybersecurity’s role as a core business function. CISOs need reliable metrics to help them make educated decisions on the allocation of resources, investments in technology and the prioritisation of threats.”
