Organizations Prefer Quick Technological Fix Over Deep-Rooted Cyber Resiliency: Report

The Marsh/Microsoft 2019 Global Risk Perception Survey is a follow-on to a similar survey published in February 2018 (conducted in 2017). SecurityWeek criticized the earlier survey results for not including a specific cybersecurity function among the respondents. There are arguments on both sides, since the survey seeks to understand the overall business position rather than the CISO/CSO position -- but for organizations that delegate security to a siloed function, the organizational results could have been skewed.


In the latest survey, a combined IT and infosec category is included among the 1,500 global business leaders. Furthermore, the role of the CISO/CSO has also become better integrated into the business of organizations over the last few years; so, the lack of a specific security function among the respondents is less of an issue.


There are five primary takeaways from the results of the new survey. These are:


Cyber concern is up, but cyber confidence is down


The perception of cyber risk as a major priority has grown from 62% in 2017 to 79% in 2019. Today, cyber threats outweigh other threats by a wide margin -- the second most concerning risk is economic uncertainty at 59%.


However, while concern has grown, confidence in cyber resiliency has declined. The percentage of organizations 'not at all confident' in their ability to understand and assess cyber threats has doubled from 9% to 18%. Lack of confidence in the ability to mitigate or prevent attacks has grown from 12% to 19%; while no confidence in the ability to manage or respond to attacks has grown from 15% to 22%.


The report suggests that this could lead to confusion and frustration if increased ..

Support the originator by clicking the read the rest link below.