Among measures to strengthen cybersecurity, overall, up to 58% of respondents claimed that their companies plan to invest in different forms of outsourcing cybersecurity in the next 12 to 18 months.
Among measures to strengthen cybersecurity, overall, up to 58% of respondents claimed that their companies plan to invest in different forms of outsourcing cybersecurity in the next 12 to 18 months.
Company bosses are boosting their cybersecurity following an alarming increase in cyberattacks, a new study commissioned by Kaspersky has found. The data shows that 71% of companies in Saudi Arabia have suffered at least one cyber incident over the last two years. One of the main reasons cited was the shortage of qualified IT security staff (34%). Among measures to strengthen cybersecurity, overall, up to 58% of respondents claimed that their companies plan to invest in different forms of outsourcing cybersecurity in the next 12 to 18 months.
Kaspersky conducted a study to learn the opinions of IT security professionals working for SMEs and corporations worldwide regarding the impact people have on cybersecurity in a company. The survey gathered information about various groups of people who influence cybersecurity, looking at both internal staff and external actors. It also analyzed levels and types of online safety company bosses believed warranted investment.
In Saudi Arabia, more than three quarters (71%) of respondents reported that their company had experienced cybersecurity incidents within the last two years, with 75% of these judged as ‘serious’. Some said the main reasons for cyber incidents occurring in their company were a lack of necessary tools for threat detection (22%), and a shortage of internal IT security staff (34%).
The respondents indicated that a variety of measures would be appropriate to address the gaps in cybersecurity. Specifically, 10% said they would like to see more external specialists brought in. One-quarter of organizations (24%) plan to invest in third-party professional services, and as many as 42% of respondents are aiming to outsource their cybersecurity to MSPs or MSSPs (managed service providers or managed security service providers). The most likely industries to invest in third-party services in the near future are critical infrastructure, energy, and oil and gas companies.
At the same time, many organizations plan to invest in automating their cybersecurity processes. In the next 12 months, almost half of businesses globally (53%) have concrete plans to implement software that automatically manages their cybersecurity, while 13% are discussing the subject.
“The automation and outsourcing of cybersecurity tasks are major areas that organizations are struggling with because of a lack of experts and alert fatigue. Turning to external experts—whether it’s outsourcing to manage the whole cybersecurity system or adopting expert-level services to assist the IT security department—is the optimal solution for many. Cybersecurity vendors, managed service providers, and managed security service providers are the companies that have relevant expertise, all the necessary tools, and can manage cybersecurity effectively for customers of any size. Additionally, they can provide the customer with various options, such as managed detection and response services, where SOC experts continuously carry out monitoring, or assistance in cases of emergency, like investigating a particular incident. Automation tools provided by cybersecurity vendors are another way an organization can strengthen its cybersecurity. For example, our XDR and MDR have out-of-the-box automation through investigation and response playbooks and embedded AI, enabling clients and partners to significantly automate their information security processes. With all possible options provided by experts, each company can determine the scope of services that are needed based on cybersecurity gaps or the desired development trajectory,” comments Ivan Vassunov, VP, Corporate Products at Kaspersky.
To cope with a shortage of tools or IT security employees in-house, Kaspersky recommends:
- Make use of the expertise offered by managed security providers offerings. For example, Kaspersky Managed Detection and Response raises the overall protection level of an organization by monitoring telemetry coming from the company’s IT network 24/7 and helps with the development of in-house processes and best practices while following the incident response guidelines provided by Kaspersky experts. Additionally, the AI assistant in MDR automatically handles about half of all security alerts to ensure maximum protection.
- Implementing Kaspersky Professional Services optimizes the workload of a struggling IT department. Kaspersky experts assess the state of your current IT security, then deploy and configure Kaspersky software quickly and properly to ensure hassle-free ongoing performance. And Kaspersky Premium Support speeds up and boosts the efficiency of any Kaspersky-based IT security infrastructure.
- For SMBs that lack the budget to purchase some cybersecurity products and hire dedicated IT security professionals, just one IT administrator (even part-time or outsourced) is enough to easily manage Kaspersky Endpoint Security Cloud through a console with numerous automated scripts.
- Invest in cybersecurity training so your current IT security specialists’ skills are always up-to-date and equipped to handle anything the cyber threat landscape throws at your organization. Kaspersky Cyber-security for IT Online Training helps build up simple yet effective IT security best practices and simple incident response scenarios for general IT administrators. Kaspersky Expert Training equips your security team with the latest knowledge and skills to manage and mitigate threats, protecting your organization from even the most sophisticated attacks.
Also read: Organizations should be driven based on people and processes instead of emphasizing technology
Do Follow: CIO News LinkedIn Account | CIO News Facebook | CIO News Youtube | CIO News Twitter
About us:
CIO News, a proprietary of Mercadeo, produces award-winning content and resources for IT leaders across any industry through print articles and recorded video interviews on topics in the technology sector such as Digital Transformation, Artificial Intelligence (AI), Machine Learning (ML), Cloud, Robotics, Cyber-security, Data, Analytics, SOC, SASE, among other technology topics.
