Most organizations not confident about security, says Symantec

Most organizations not confident about security, says Symantec

By SecurityAsia Editors | Nov 2, 2011

A poll by Symantec has revealed that most enterprises are not confident in their security posture and that staffing is a major issue limiting IT security's effectiveness.
 
Research was conducted in June 2011 by Applied Research, which surveyed C-level and IT professionals at small, medium, and large enterprises (1,000-2,400, 2,500-4,999, and 5,000+ employees). The report was designed to examine security concerns and challenges IT organizations are facing. The survey included 1,025 respondents from countries in North America, EMEA (Europe, Middle East and Africa), Asia Pacific, and Latin America.

The survey found cyber attacks were the top concern of the organisations surveyed and the importance of these threats has increased for many respondents.  Over 57% of respondents said they lack confidence in their IT security staffs' ability to respond to new and emerging threats.

45% of respodent also cited a lack of time to respond to new threats for their existing staff.  Overall, 43% of organisations worldwide reported they are somewhat or extremely understaffed.

Those who lack confidence in their ability to respond to threats also reported issues with staff effectiveness.  The top three issues impacting staff effectiveness were recruiting (46%), retention (42%) and skill set gaps with existing staff (35%).  The findings suggest that effectiveness is linked to both staffing levels as well as staff experience and skill set.

Beyond these staffing issues, the other top concerns noted by respondents were keeping up with changes in the threat landscape, maintaining adequate visibility of their own infrastructure and managing security log and alert data in a timely and effective manner.

68% identified threat intelligence as one of their top two concerns.  Concerns about the potential for new avenues of attack in an evolving infrastructure are reflected in the 49% who ranked security visibility as a top concern.  Finally, a significant number (45%) reported they are concerned about their ability to properly correlate and analyze the security information and alerts that are being generated by their security solutions.
 

Add comment

Post a Comment

The content of this field is kept private and will not be shown publicly.
Verification Code
This question is for testing whether you are a human visitor and to prevent automated spam submissions.
 

knowledge_central_tab

 
 
Knowledge Central
Accelerating the Deployment of the Evolved Cyber Range
Ixia BreakingPoint creates an Internet-scale cyber range environment from a single 7-inch-high device for arming and training cyber warriors. Learn how BreakingPoint can be used by organizations to defend national interests by assessing, educating, and certifying elite cyber warriors and equipping those forces to harden the resiliency of critical network and data center infrastructures.
A Six-Step Plan for Competitive Device Evaluations
This paper presents a six-step methodology for conducting competitive product evaluations that provide advance insight into the performance, security, and stability of devices within production network and data center environments. Following this will give insights on how to evaluate and select the network or security devices for Enterprise, Federal, and Carrier Infrastructures
 
 
 
A Case Study of Eurograbber: How 36 Million Euros was Stolen via Malware
This is a case study about a sophisticated, multi-dimensional and targeted attack that stole an estimated 36+ million Euros from more than 30,000 bank customers from multiple banks across Europe.
Symantec, Singapore school partner to nurture next-generation security talents
Symantec Corp. and the Singapore Management University will jointly train and equip IT security professionals with the latest knowledge and skill sets in information security.