Top 5 Cybersecurity Priorities for 2019: Ponemon Study

save
Share and earn Cybytes
Facebook Twitter LinkedIn Email

<p>We asked 2,410 IT and cybersecurity decision-makers in six countries to identify their top cybersecurity and governance priorities for the New Year. Here’s what we learned.</p>

<p>What are your top cybersecurity concerns for 2019? Tenable commissioned Ponemon Institute to conduct a survey of 2,410 IT and cybersecurity professionals in six countries to find out.</p>

<p>The results are included in our December 2018 report, <a href=”https://www.tenable.com/cyber-exposure/ponemon-cyber-risk-report”>Measuring & Managing the Cyber Risks to Business Operations</a>. The report is based on a survey fielded in fall 2018 to respondents in the United States, United Kingdom, Germany, Australia, Mexico and Japan. Respondents identified the five threats they’re most concerned about, and shared their cybersecurity and governance priorities for the year ahead. </p>

<h2>5 Top Cybersecurity Threats in 2019</h2>

<p>When we asked respondents to identify the threats they’re most worried about in the new year, their highest-rated cybersecurity concerns were third-party risks, data breaches and attacks on Internet of Things (IoT) or Operational Technology (OT) assets.</p>

<h4>Top 5 threats organizations are most worried about in 2019</h4>
<table><tbody>
<tr>
<td><b>Threat</b></td>
<td><b>Percent respondents</b></td>
</tr>
<tr>
<td>1. Third-party misuses or shares our confidential data</td>
<td>64%</td>
</tr>
<tr>
<td>2. An attack involving IoT or OT assets</td>
<td>56%</td>
</tr>
<tr>
<td>3. A significant disruption to business processes caused by malware</td>
<td>54%</td>
</tr>
<tr>
<td>4. A data breach involving 10,000 or more customer or employee records</td>
<td>52%</td>
</tr>
<tr>
<td>5. An attack against the company’s OT infrastructure resulting in downtime to plant and/or operational equipment</td>
<td>48%</td>
</tr>
</tbody>
</table>
<p><i>Source: Measuring & Managing the Cyber Risks to Business Operations, Ponemon Institute & Tenable, December 2018.</i></p>

<p>In this survey, past experience does not appear to be the driving factor for future worries. For example, although 56% of respondents said they are worried about the prospect of an attack involving IoT or OT assets in 2019, less than a quarter of respondents (23%) said they have experienced such an attack in the past 24 months. </p>

<h4>Top 5 attacks experienced in the past 24 months</h4>
<table><tbody>
<tr>
<td><b>Attack</b></td>
<td><b>Percent respondents</b></td>
</tr>
<tr>
<td>1. A careless employee fell for a phishing scam that resulted in credential theft</td>
<td>67%</td>
</tr>
<tr>
<td>2. A significant disruption to business processes caused by malware</td>
<td>48%</td>
</tr>
<tr>
<td>3. A third party misused or shared confidential information with other third parties</td>
<td>41%</td>
</tr>
<tr>
<td>4. A cyber attack that caused significant downtime</td>
<td>35%</td>
</tr>
<tr>
<td>5. A data breach involving 10,000 or more customer or employee records</td>
<td>41%</td>
</tr>
</tbody>
</table>
<p><i>Source: Measuring & Managing the Cyber Risks to Business Operations, Ponemon Institute & Tenable, December 2018.</i></p>

<p>Despite their experiences and concerns, the majority of respondents (59%) said their organization does not attempt to quantify the damage any of these events could have on their business. </p>

<h2>2019 Cybersecurity and Governance Priorities</h2>

<p>In our view, the activities involved in keeping corporate data safe and secure span multiple parts of an organization, including not only the IT and infosec teams but also the governance, risk, and compliance team. For that reason, we asked respondents to identify their cybersecurity priorities as well as their governance priorities.</p>

<p>When it comes to cybersecurity, keeping ahead of attackers and reducing complexity in the IT security infrastructure were the top two priorities for 2019. Nearly two thirds of respondents (61%) identified improving the ability to keep up with the sophistication and stealth of the attackers as a top priority. Six in 10 (60%) cited reducing complexity as important for their organization in the year ahead.</p>

<h4>Top 5 cybersecurity priorities for 2019</h4>
<table><tbody>
<tr>
<td><b>Cybersecurity priority</b></td>
<td><b>Percent respondents</b></td>
</tr>
<tr>
<td>1. Improve our ability to keep up with the sophistication and stealth of the attackers</td>
<td>61% </td>
</tr>
<tr>
<td>2. Reduce complexity in our IT security infrastructure</td>
<td>60%</td>
</tr>
<tr>
<td>3. Improve protection of sensitive and confidential data from unauthorized access</td>
<td>46%</td>
</tr>
<tr>
<td>4. Improve controls over third-party access to our sensitive and confidential data</td>
<td>42%</td>
</tr>
<tr>
<td>5. Reduce the risk of attack to the OT infrastructure</td>
<td>40%</td>
</tr>
</tbody>
</table>
<p><i>Source: Measuring & Managing the Cyber Risks to Business Operations, Ponemon Institute & Tenable, December 2018.</i></p>

<p>When it comes to governance, reducing third-party risk is the top priority for 2019. Some two thirds of respondents (67%) said they will focus on ensuring that third parties have appropriate security practices to protect sensitive and confidential data.</p>

<h4>Top 5 governance priorities for 2019</h4>
<table><tbody>
<tr>
<td><b>Governance priority</b></td>
<td><b>Percent respondents</b></td>
</tr>
<tr>
<td>1. Ensure third parties have appropriate security practices to protect sensitive and confidential data</td>
<td>67%</td>
</tr>
<tr>
<td>2. Increase communication with C-level and board of directors about the cyber threats facing our organization</td>
<td>64%</td>
</tr>
<tr>
<td>3. Increase staff training to prevent careless behavior such as falling for a phishing scam or sharing passwords</td>
<td>53%</td>
</tr>
<tr>
<td>4. Increase the number of full-time employees in our IT security function</td>
<td>48%</td>
</tr>
<tr>
<td>5. Allocate more resources to vulnerability management</td>
<td>47%</td>
</tr>
</tbody>
</table>
<p><i>Source: Measuring & Managing the Cyber Risks to Business Operations, Ponemon Institute & Tenable, December 2018.</i></p>

<p>In addition to identifying top cybersecurity priorities, the report also explores <a href=”https://www.tenable.com/blog/uncovering-the-business-costs-of-cyber-risk… business cost of cyber risk</a>. We discovered most organizations are not accurately measuring the business costs of cyber risk, and are unable to quantify the damage cyber attacks could have on their businesses. Thus, decisions about the allocation of resources, investments in technologies and the prioritization of threats are being made without critical intelligence. Moreover, organizations are unable to correlate the cyber risk KPIs they are using to the mitigation of a data breach or security exploit.</p>

<h2>About this study</h2>
<p>The report Measuring & Managing the Cyber Risks to Business Operations is based on a survey of 2,410 IT and IT security decision-makers in the United States, United Kingdom, Germany, Australia, Mexico and Japan. All respondents have involvement in the evaluation and/or management of investments in cybersecurity solutions within their organizations. The consolidated global findings are presented in this report. Download your free copy <a href=”https://www.tenable.com/cyber-exposure/ponemon-cyber-risk-report”>here</…

Share this post and earn Cybytes
Facebook Twitter LinkedIn Email
Follow
1609 Followers
About Tenable
Tenable™, Inc. is the Cyber Exposure company. Over 24,000 organizations of all sizes around the globe rely on Tenable to manage and measure their modern attack surface to accurately understand and reduce cyber risk. As the creator of Nessus®, Tenable built its platform from the ground up to deeply understand assets, networks and vulnerabilities, extending this knowledge and expertise into Tenable.io™ to deliver the world’s first platform to provide live visibility into any asset on any computing platform. Tenable customers include over 50 percent of the Fortune 500, large government agencies and organizations across the private and public sectors. Learn more at tenable.com.
Promoted Content
Five Steps to Building a Successful Vulnerability Management Program
Is your vulnerability management program struggling? Despite proven technology solutions and the best efforts of IT teams, unresolved vulnerabilities remain an ongoing source of friction and frustration in many organizations. Regardless of how many vulnerabilities are fixed, there will always be vulnerabilities that can’t easily be remediated – and too often, finger-pointing between IT teams and business groups can ensue.

Our Revolution

We believe Cyber Security training should be free, for everyone, FOREVER. Everyone, everywhere, deserves the OPPORTUNITY to learn, begin and grow a career in this fascinating field. Therefore, Cybrary is a free community where people, companies and training come together to give everyone the ability to collaborate in an open source way that is revolutionizing the cyber security educational experience.

Cybrary On The Go

Get the Cybrary app for Android for online and offline viewing of our lessons.

Get it on Google Play
 

Support Cybrary

Donate Here to Get This Month's Donor Badge

 
Skip to toolbar

We recommend always using caution when following any link

Are you sure you want to continue?

Continue
Cancel