A recent study by Trend Micro Incorporated has revealed a significant gap in cybersecurity coverage among global organizations. The research indicates that only one-third of companies maintain round-the-clock cybersecurity, leaving them vulnerable to increased risks in an increasingly digital landscape. The survey gathered insights from 2,600 global IT leaders responsible for cybersecurity in small, medium, and large organizations.
The top three gaps in cyber-resilience highlighted by the respondents were:
1. Sufficient staffing for continuous coverage: Only 36% of organizations have adequate staffing to ensure 24/7/365 cybersecurity coverage. 2.
Effective attack surface management: Just 35% of organizations use attack surface management techniques to measure and mitigate digital risks. 3. Utilization of regulatory frameworks: Only 34% of organizations adhere to proven regulatory frameworks like the NIST Cybersecurity Framework.
The research suggests that the failure to meet these cybersecurity basics is often due to a lack of leadership and accountability.
Addressing cybersecurity leadership gaps
Nearly half (48%) of the respondents claimed that their leadership does not consider cybersecurity to be their responsibility, with only 17% strongly disagreeing with this statement.
When asked who should hold the responsibility for mitigating business risk, responses varied widely, reflecting a lack of clarity in reporting lines. About one-third (31%) indicated that IT teams should bear the responsibility. More than half (54%) of global respondents believe their organization’s attitude toward cyber risk is inconsistent and fluctuates month-to-month.
This inconsistency is likely driven by the absence of a cohesive cybersecurity strategy. Almost all respondents (96%) expressed concerns about their attack surface, with over one-third (36%) worried about discovering, assessing, and mitigating high-risk areas. Additionally, 19% of respondents reported challenges in working from a single source of truth.
Sharda Tickoo, Country Manager for India & SAARC at Trend Micro, emphasized the importance of strong leadership in cybersecurity. “A lack of clear leadership on cybersecurity can have a paralyzing effect on an organization—leading to reactive, piecemeal, and erratic decision making. Companies need CISOs to clearly communicate in terms of business risk to engage their boards.”
These findings highlight the urgent need for enhanced leadership and clearer communication channels within organizations to improve cybersecurity resilience.
As the digital landscape continues to evolve, it is crucial for businesses to prioritize cybersecurity and ensure they have the necessary resources and strategies in place to protect their assets and data.
Feeling stuck in self-doubt?
Stop trying to fix yourself and start embracing who you are. Join the free 7-day self-discovery challenge and learn how to transform negative emotions into personal growth.
