Report: CISOs’ big worry in new role is inaccurate data on security posture
Security Magazine –
A recent report by Panaseer highlights the concern of senior cybersecurity decision makers regarding the accuracy of the company’s security posture audit when taking on a new CISO role.
The survey, conducted among senior cybersecurity decision makers in 1,000+ employee organizations in the U.K. and U.S., reveals that 54% of respondents consider this an important concern, recognizing that inaccurate security data can obscure weaknesses and lead to inefficient utilization of security resources.
The report also emphasizes the importance of data quality, which was a greater concern for respondents compared to security budget limitations and being scapegoated for a breach.
Respondents expressed challenges in gaining complete visibility into security controls data, understanding the threat landscape, and obtaining trusted data for strategic decision-making.
Although 36% of security leaders have confidence in their security data for strategic decision-making, 79% of organizations admitted to being surprised by security incidents that evaded their controls.
This indicates either inaccurate data or a lack of proper interpretation of the data to improve security posture.
The survey further reveals that 90% of security leaders prioritize improving the accuracy of cybersecurity data in the next 12 months.
Concerns about threat actors leveraging AI to find gaps in security controls were also prevalent among respondents.
Given that security leaders spend nearly half of their time manually collecting and presenting data, there is a sense of urgency to find more automated methods.
Overall, the report emphasizes the need for accurate and reliable security data, as well as the challenges faced by CISOs in understanding the security posture and making critical business decisions based on this information.
Link: https://securityshelf.com/2023/10/25/report-cisos-big-worry-in-new-role-is-inaccurate-data-on-security-posture/