NEW_Security Priorities 2021_Sample Slides.pdf
- 1. Security Priorities Study 2021 Insight into the security projects focused on now and in the coming year
- 2. Purpose and methodology Source: Foundry Security Priorities Study, 2021 Survey goal To gain a better understanding of the various security projects organizations are focused on now and in the coming year. The research also looks at the issues that will demand the most time and strategic thinking for IT and security teams, with some questions specific on Operational Technology (OT) environments. Total respondents 772 Collection method Online questionnaire Number of questions 35 Region North America 57% EMEA 17% APAC 26% Average company size 11,535 employees IT Leadership All survey respondents are involved in IT and/or corporate/physical security decisions. Audience base CIO, Computerworld, CSO, InfoWorld and Network World site visitors, and email invitations to audience base 6% 9% 9% 10% 10% 10% 10% 25% Retail, wholesale, distribution Services (legal, consulting, real estate) Education Government/Non-profit Healthcare Financial services Manufacturing Technology Job titles Top represented industries 77% 9% 6% 5% 3% IT/Security mgmt. Exec. IT/Security Business mgmt. IT/Security pro Other 2
- 3. 11% 24% 65% 3 Physical security added to responsibilities Question: Have you added physical security to your responsibilities in the past three years or do you expect to in the future? Source: Foundry Security Priorities Study, 2021 Yes No, and do not expect to No, but expect to in the next 12 months
- 4. 5% 9% 13% 15% 16% 16% 16% 22% 26% 27% 27% 44% Other Not sure Malicious trusted user(s) – an intentional insider attack Software supply chain breaches Compromised active identities Stolen credentials Zero-day vulnerability Unexpected/underexpected business risks which exposed a vulnerability… Misconfiguration of services or systems either on- or off-premises Security vulnerabilities at third-party individuals or organizations (e.g., managed… Unpatched software vulnerabilities Non-malicious user error – fell victim to phishing or… 4 Security incidents stem from user error Question: Of the security incidents your organization experienced last year, how many were caused by the following: Source: Foundry Security Priorities Study, 2021 91% are aware of what caused their security incidents in the past year Up from 87% in 2020 5% 9% 13% 15% 16% 16% 16% 22% 26% 27% 27% 44% Other Not sure Malicious trusted user(s) – an intentional insider attack Software supply chain breaches Compromised active identities Stolen credentials Zero-day vulnerability Unexpected/underexpected business risks which exposed a vulnerability (e.g., managed service providers or other trusted partners) Misconfiguration of services or systems either on- or off-premises Security vulnerabilities at third-party individuals or organizations (e.g., managed service providers or other trusted partners) Unpatched software vulnerabilities Non-malicious user error – fell victim to phishing or non-malicious violations of security policy(s)
- 5. 5 weeks is the average longest amount of time passed before a security event was detected Longest amount of time before security incident was detected Question: What is the longest amount of time that passed before a security event was detected at your organization? 17% 5% 6% 13% 27% 33% Unsure More than 6 months Three - six months One - three months One - four weeks Within one week Source: Foundry Security Priorities Study, 2021 Enterprise: 30% SMB: 23% Enterprise: 11% SMB: 22% 5
- 6. #1 #2 #3 #4 #5 Be appropriately prepared to respond to a security incident Improve the protection of confidential and sensitive data Improve/increase security awareness among end-users through training Upgrade IT and data security to boost corporate resiliency Reduce complexity in IT security infrastructure This year’s top security priorities Question: What are your organizations top security priorities for the coming year? Source: Foundry Security Priorities Study, 2021 6
- 7. Zero Trust & SOAR lead the list of technologies being researched Question: Which option best describes your current activity for each of the following security solutions? 28% 28% 28% 30% 31% 31% 32% 32% 32% 32% 34% 35% 35% 37% 38% 15% 11% 12% 12% 10% 13% 15% 12% 13% 9% 13% 11% 10% 12% 14% 30% 26% 31% 17% 15% 29% 21% 25% 18% 10% 17% 15% 16% 18% 21% 15% 14% 16% 10% 9% 15% 14% 11% 12% 9% 10% 11% 10% 10% 11% 13% 22% 12% 31% 35% 12% 19% 20% 26% 39% 27% 28% 29% 24% 16% Data access governance Data discovery solutions Cloud data protection Biometrics Ransomware broker Cloud-based cybersecurity services Behavior monitoring & analysis Security intelligence services Cloud access security brokers (CASBs) Blockchain-enabled security solutions XDR (extended detection and response) Deception technology SASE (secure access service edge) SOAR (security orchestration, automation and response) Zero trust technologies On my radar or actively searching Piloting In production Upgrading/refining Not interested Source: Foundry Security Priorities Study, 2021 55% in 2020 46% currently use Zero Trust technologies up from 35% in 2020 7
- 8. 8 Continue the conversation ● To get results from Foundry research when it happens, or any other news, follow us on Twitter: @FoundryIDG ● Sign up to receive our monthly marketing newsletter at www.FoundryCo.com/newsletters/ ● Visit us on LinkedIn here: www.linkedin.com/company/foundryidg Additional ways to stay on top of information from Foundry: To receive a briefing on the full results from this study, or for more information, please contact your Foundry sales executive or contact us. For more information on content marketing and lead nurture, explore our resources on this site under marketing tools. We have additional primary research, blogs and white papers to make you smarter about tech decision makers, and targeted products and programs to help you reach them!