Regular tech updates are a key factor in security success
Security teams that proactively refresh their technology regularly have then most success in fending off threats according to a new report from Cisco.
On average, programs that include a proactive, best-of-breed tech refresh strategy are 12.7 percent more likely to report overall security success. However, not all organizations have the budget or expertise to make this happen, but a strategy to migrate to cloud and SaaS security solutions can help.
A well-integrated technology stack is the second most important factor for cybersecurity success. It has a positive impact on nearly every outcome evaluated, increasing the probability of overall success by an average of 10.5 percent. A interesting side-effect is that integrations also benefit the recruitment and retention of talent, as security professionals want to work with the best technology and avoid burnout.
The study also finds integration is the most significant factor in establishing a security culture that the entire organization embraces. Instead of traditional security training programs, which don’t correlate with positive culture, companies need to invest in technology that is flexible and frictionless.
Viewed as a standalone practice, simply knowing about potential cyber risks appears to correlate the least with overall security success. This points to the importance of having a comprehensive threat intelligence and incident management program with the ability to both mitigate and remediate issues. Practices such as timely incident response and accurate threat detection correlate much more strongly with overall security success.
"Security practitioners need to make fast, informed decisions. Yet they are often armed with dozens of tools from multiple vendors, requiring a fair amount of duct tape to get them to work together. This creates complexity, cost, and overhead," says Mike Hanley, chief information security officer at Cisco. "Cisco's 2021 Security Outcomes Study helps teams prioritize practices that not only secure the business, but also play a significant role in enabling its growth and success. Even in the face of an ever-changing threat landscape and shrinking budgets, successful security outcomes are possible."
The full study is available from the Cisco site.