Home > Electrical/Electronics > Computer (I.T) > Positioning Organisations Against Cyber Criminals

Positioning Organisations Against Cyber Criminals

The fourth industrial revolution is driving change and digitalisation at an exciting pace. New markets are being created; and with every innovation the world becomes more and more digitally connected.

Cyber is growing and moving in multiple dimensions across multiple disciplines—beyond an organisation’s perimeter and information technology (IT) environments, permeating the products it creates, the factories where it makes them, the spaces where its employees conceive them, and where its customers use them.

The cyber space is at the centre of digital transformation.

According to Deloitte’s 2019 Future of Cyber survey, there are notable gaps in organisations’ abilities to meet cybersecurity demands for the future.

The findings indicate that 16 percent of cyber organisations are challenged by their ability to prioritise cyber risk across the enterprise  followed closely behind by lack of management alignment on priorities and adequate funding, each at 15 per cent.

Deloitte Africa Risk Advisory Cyber leader, Eric Mc Gee, said: “Cyber leaders today are focused on digital transformation as a catalyst for change for both the greater enterprise and their cyber agendas. The good news is the survey results show that organisations are no longer taking a wait-and-see philosophy to preparing for and responding to cyber incidents.

“There is a whole new way of thinking that is starting to occur with how organisations are going to achieve their business outcomes, and that is with a cyber everywhere mindset.”

Findings from the 500 C-suite cybersecurity executives surveyed also suggested that there is still much work to do in aligning cyber initiatives to executive management’s digital transformation priorities.

READ ALSO  Govt Must Act Now To Stop The Sale Of Unsafe Electricals Online

There is a real gap that must be bridged, with finite budgets and resources as well as a lack of prioritisation by executive management. The consensus was that many organisations aren’t fully equipped to efficiently and effectively tackle cyber demands.

Forty-three per cent of surveyed Chief Information Security Officers (CISOs) indicated that they report directly to the CEO. This is consistent across the total survey population where 32 per cent of respondents indicated the CISO reported to the CEO, with only 19 per cent indicating that the role reported to the Chief Information Officer (CIO).

In Deloitte’s experience, facilitating hundreds of CISO transformation labs over the past five years and through informal collection of data, nearly 80 per cent of CISOs report to a CIO or CSO. This is an indication that CISOs are, in fact, directly reporting to a CEO is quite encouraging but counter to Deloitte’s experience.

Half of organisations (49 per cent) have cybersecurity on their board agenda at least quarterly. On the other hand, half of boards are not discussing cyber as often as they should. More concerning is that only four per cent of respondents say cybersecurity is on the agenda once a month.

While organisations are prioritising digital transformation, only 14 per cent of cyber budgets are allocated to provide for cybersecurity in transformation efforts.

Less than 20 per cent of organisations have security liaisons embedded within business units to foster greater collaboration, innovation, and security.

Organisations are turning to third parties to manage certain functions of their cyber operations.

According to the report, 65 per cent of the CISOs surveyed, 21-30 per cent of total cyber operations are outsourced, with nearly half (48 per  cent) of CISOs selecting insider threat detection as a top function that they turn to third parties to manage.

READ ALSO  Facebook Blacklisting: Zuckerberg Now Has More Power Than Govt, Kevin Sorbo Says

There’s a disconnect between the majority (85 per cent) of the survey respondents who indicate that they are using Agile/DevOps in application development and then ranking DevSecOps lowest (11 per cent) on the cyber defence priorities and investments areas, which may explain why 90 per cent of organisations surveyed experienced disclosures of sensitive production data within the past year.

On data integrity, 35 per cent was the top-ranked cybersecurity threat respondents were most concerned about. This was followed by unintended actions of well-meaning employees (32 per cent) resulting in a negative event and then followed by technical vulnerabilities (31 percent).

“The aim of this survey report is to put the numbers into context and to expand the dialogue and acceptance of cyber everywhere so that organisations are not limited by it but empowered to embrace the opportunities it will create,” Mc Gee said.

As organisations embrace digital transformation and shift to the cloud increasing the complexity of technology infrastructure and outsourcing workloads to third parties, they are also expanding their cyber risk. Cyber will become more prolific across systems, platforms, and people — employees, customers, and partners.

Deloitte said enterprise leadership would have to correlate all of that to stay ahead of the adversary and protect the organisation’s most valuable assets.

Source: The Nation

Total Views: 85 ,
0
0

One thought on “Positioning Organisations Against Cyber Criminals

Leave a Reply

Your email address will not be published. Required fields are marked *