2021 IDG Security Priorities Study
- 1. I D G C O M M U N I C A T I O N S , I N C . Q U A L I T Y MA T T E R S IDG COMMUNICATIONS, INC. QUALITY MATTERS IDG Security Priorities Study Insight into the security projects focused on now and in the coming year 2021
- 2. I D G C O M M U N I C A T I O N S , I N C . Q U A L I T Y MA T T E R S 77% 9% 6% 5% 3% Purpose and Methodology Source: IDG Security Priorities Study, 2021 To gain a better understanding of the various security projects organizations are focused on now and in the coming year. The research also looks at the issues that will demand the most time and strategic thinking for IT and security teams, with some questions specific on Operational Technology (OT) environments. SURVEY GOAL AUDIENCE BASE CIO, Computerworld, CSO, InfoWorld, and Network World site visitors, and email invitations to audience base. NUMBER OF QUESTIONS 35 COLLECTION METHOD Online questionnaire 772 IT LEADERSHIP All survey respondents are involved in IT and/or corporate/physical security decisions. Business Mgmt Technology 25% Manufacturing 10% Financial Services 10% Healthcare 9% Government/Non-profit 9% Education 8% Services (legal, consulting, real estate) 7% Retail, Wholesale and Distribution 6% JOB TITLES TOTAL RESPONDENTS TOP REPRESENTED INDUSTRIES AVERAGE COMPANY SIZE 11,535 EMPLOYEES ExecIT/ Security IT/Security Pro IT/ Security Mgmt. Other 2 REGION North America – 57% APAC – 35% EMEA – 17%
- 3. I D G C O M M U N I C A T I O N S , I N C . Q U A L I T Y MA T T E R S Physical Security Added to Responsibilities 3 Q. Have you added physical security to your responsibilities in the past three years or do you expect to in the future? Source: IDG Security Priorities Study, 2021 11% 24% 65% No, but expect to in the next 12 months No, and do not expect to Yes <1,000 64% 1,000+ 64% <1,000 12% 1,000+ 11% <1,000 24% 1,000+ 24%
- 4. I D G C O M M U N I C A T I O N S , I N C . Q U A L I T Y MA T T E R S Security Incidents Stem from User Error 4 Q. Of the security incidents your organization experienced last year, how many were caused by the following: Source: IDG Security Priorities Study, 2021 5% 9% 13% 15% 16% 16% 16% 22% 26% 27% 27% 44% Other Not sure Malicious trusted user(s) – an intentional insider attack Software supply chain breaches Compromised active identities Stolen credentials Zero-day vulnerability Unexpected/underexpected business risks which exposed a vulnerability (pandemic, business interruption, workforce changes, etc.) Misconfiguration of services or systems either on- or off-premises Security vulnerabilities at third-party individuals or organizations (e.g., managed service providers or other trusted partners) Unpatched software vulnerabilities Non-malicious user error – fell victim to phishing or non-malicious violations of security policy(s) 91% are aware of what caused their security incidents in the past year Up from 87% in 2020
- 5. I D G C O M M U N I C A T I O N S , I N C . Q U A L I T Y MA T T E R S Longest Amount of Time Before Security Incident was Detected 5 Q. What is the longest amount of time that passed before a security event was detected at your organization? Source: IDG Security Priorities Study, 2021 17% 5% 6% 13% 27% 33% Unsure More than 6 months Three - 6 months One - three months One - four weeks Within one week Enterprise: 30% SMB: 23% Enterprise: 11% SMB: 22% 5 weeks is the average longest amount of time passed before a security event was detected
- 6. I D G C O M M U N I C A T I O N S , I N C . Q U A L I T Y MA T T E R S This Year’s Top Security Priorities 6 Q. What are your organizations top security priorities for the coming year? Source: IDG Security Priorities Study, 2021 #1 Be appropriately prepared to respond to a security incident #2 Improve the protection of confidential and sensitive data #3 Improve/increase security awareness among end-users through training #4 Upgrade IT and data security to boost corporate resiliency #5 Reduce complexity in IT security infrastructure
- 7. I D G C O M M U N I C A T I O N S , I N C . Q U A L I T Y MA T T E R S Zero Trust & SOAR Lead the List of Technologies Being Researched Q: Which option best describes your current activity for each of the following security solutions? Source: IDG Security Priorities Study, 2021 28% 28% 28% 30% 31% 31% 32% 32% 32% 32% 34% 35% 35% 37% 38% 15% 11% 12% 12% 10% 13% 15% 12% 13% 9% 13% 11% 10% 12% 14% 30% 26% 31% 17% 15% 29% 21% 25% 18% 10% 17% 15% 16% 18% 21% 15% 14% 16% 10% 9% 15% 14% 11% 12% 9% 10% 11% 10% 10% 11% 13% 22% 12% 31% 35% 12% 19% 20% 26% 39% 27% 28% 29% 24% 16% Data access governance Data discovery solutions Cloud data protection Biometrics Ransomware broker Cloud-based cybersecurity services Behavior monitoring & analysis Security intelligence services Cloud access security brokers (CASBs) Blockchain-enabled security solutions XDR (Extended Detection and Response) Deception Technology SASE (Secure Access Service Edge) SOAR (Security Orchestration, Automation and Response) Zero Trust technologies On my radar or actively searching Piloting In production Upgrading/refining Not interested 7
- 8. I D G C O M M U N I C A T I O N S , I N C . Q U A L I T Y MA T T E R S 8 Continue the Conversation To get results from IDG research when it happens, or any other news, follow us on Twitter: @IDGWorld ADDITIONAL WAYS TO STAY ON TOP OF INFORMATION FROM IDG : Sign up to receive our monthly marketing newsletter at www.idg.com/newsletters/ Visit us on LinkedIn here: www.linkedin.com/company/international-data-group--idg- To receive a briefing on the full results from this study, or for more information, please contact your IDG sales executive or contact us. For more information on content marketing and lead nurture, explore our resources on this site under marketing tools. We have additional primary research, blogs and white papers to make you smarter about tech decision makers, and targeted products and programs to help you reach them!