According to a recent survey by Gartner, while 95% of CIOs are expecting cyber threats to increase over the next three years, only 65% of their organizations currently have a cybersecurity expert. The findings also indicate that skills challenges continue to plague organizations that undergo digitalization, with digital security staffing shortages considered a top inhibitor to innovation.
Cybersecurity remains a source of deep concern for organizations as per the survey. according to Rob McMillan, research director at Gartner, many cybercriminals not only operate in ways that organizations struggle to anticipate, but also demonstrate a readiness to adapt to changing environments.
“In a twisted way, many cybercriminals are digital pioneers, finding ways to leverage big data and web-scale techniques to stage attacks and steal data,” says McMillan. “CIOs can’t protect their organizations from everything, so they need to create a sustainable set of controls that balances their need to protect their business with their need to run it.
The survey further states that some aspects of digital security have been deployed by 35% of organisations and an additional 36% are actively experimenting or planning to implement in the short term. Gartner predicts that 60% of security budgets will be in support of detection and response capabilities by 2020.
“Taking a risk-based approach is imperative to set a target level of cybersecurity readiness. “He also stated that “Raising budgets alone doesn’t create an improved risk posture. Security investments must be prioritized by business outcomes to ensure the right amount is spent on the right things,” McMillan further adds.
According to the survey, many CIOs consider growth and market share as the top-ranked business priority for 2018. Growth often means more diverse supplier networks; different ways of working, funding models and patterns of technology investing; as well as different products, services and channels to support.
“The bad news is that cybersecurity threats will affect more enterprises in more diverse ways that are difficult to anticipate,” McMillan said. “While the expectation of a more dangerous environment is hardly news to the informed CIO, these growth factors will introduce new attack vectors and new risks that they’re not accustomed to addressing.”
The survey also reveals that 93% of CIOs at top-performing organizations say that digital business has enabled them to lead IT organizations that are adaptable and open to change. To the benefit of many security practices, this cultural openness broadens the organization’s attitude towards new recruitment and training avenues.