Connect with us

Global Banking and Finance Review is an online platform offering news, analysis, and opinion on the latest trends, developments, and innovations in the banking and finance industry worldwide. The platform covers a diverse range of topics, including banking, insurance, investment, wealth management, fintech, and regulatory issues. The website publishes news, press releases, opinion and advertorials on various financial organizations, products and services which are commissioned from various Companies, Organizations, PR agencies, Bloggers etc. These commissioned articles are commercial in nature. This is not to be considered as financial advice and should be considered only for information purposes. It does not reflect the views or opinion of our website and is not to be considered an endorsement or a recommendation. We cannot guarantee the accuracy or applicability of any information provided with respect to your individual or personal circumstances. Please seek Professional advice from a qualified professional before making any financial decisions. We link to various third-party websites, affiliate sales networks, and to our advertising partners websites. When you view or click on certain links available on our articles, our partners may compensate us for displaying the content to you or make a purchase or fill a form. This will not incur any additional charges to you. To make things simpler for you to identity or distinguish advertised or sponsored articles or links, you may consider all articles or links hosted on our site as a commercial article placement. We will not be responsible for any loss you may suffer as a result of any omission or inaccuracy on the website. .

Top Stories

IBM AND PONEMON STUDY REVEALS ORGANISATIONS REMAIN UNPREPARED TO RESPOND TO CYBERATTACKS
IBM AND PONEMON STUDY REVEALS ORGANISATIONS REMAIN UNPREPARED TO RESPOND TO CYBERATTACKS

Published : , on

Two-year study shows decline in Cyber Resilience in 2016

Sixty-six percent not confident in their organisation’s ability to recover from cyberattacks

Resilient, an IBM Company and the Ponemon Institute unveiled the results of the annual Cyber Resilient Organization study, which found that only 32 percent of IT and security professionals say their organisation has a high level of Cyber Resilience – down slightly from 35 percent in 2015. The 2016 study also found that that 66 percent of respondents say their organisation is not prepared to recover from cyberattacks.

For the second straight year, the study showed that challenges with incident response (IR) are hindering Cyber Resilience. Seventy-five percent of respondents admit they do not have a formal cyber security incident response plan (CSIRP) that is applied consistently across the organisation. Of those with a CSIRP in place, 52 percent have either not reviewed or updated the plan since it was put in place, or have no set plan for doing so. Additionally, 41 percent say the time to resolve a cyber incident has increased in the past 12 months, compared to only 31 percent who say it has decreased.

“This year’s Cyber Resilience study shows that organisations globally are still not prepared to manage and mitigate a cyberattack,” said John Bruce, CEO and co-founder of Resilient, an IBM Company. “Security leaders can drive significant improvement by making incident response a top priority – focusing on planning, preparation, and intelligence.”

According to respondents, an incident response platform (IRP) is among the most effective security technologies for helping organisations become Cyber Resilient, along with identity management and authentication, and intrusion detection and prevention systems.

The study also uncovered common barriers to Cyber Resilience. The majority – 66 percent – say “insufficient planning and preparedness” is the top barrier to Cyber Resilience. Respondents also indicate that the complexity of IT and businesses processes is increasing faster than their ability to prevent, detect, and respond to cyberattacks – leaving businesses vulnerable. This year, 46 percent of respondents say the “complexity of IT processes” is a significant barrier to achieving a high level of Cyber Resilience, up from 36 percent in 2015. Fifty-two percent say “complexity of business processes” is a significant barrier, up from 47 percent in 2015.

Conducted by the Ponemon Institute and sponsored by Resilient, The 2016 Cyber Resilient Organization is a benchmark study on Cyber Resilience – an organisation’s ability to maintain its core purpose and integrity in the face of cyberattacks. The global survey features insight from more than 2,400 security and IT professionals from around the world, including the United States, United Kingdom, France, Germany, United Arab Emirates, Brazil, and Australia.

While a recent study from IBM’s Institute of Business Value found that reducing incident response time is the top challenge facing security professionals today[1], this new survey from the Ponemon Institute shows that the majority of companies are still not taking the proper steps to plan an effective and comprehensive response plan.

While the results of the study show that many organisations have yet to implement effective planning and preparedness measures to respond to cyberattacks, studies show that incident response will become a greater priority within the next several years.[2]

“While companies are seeing the value of deploying an incident response plan, there is still a lag in having the appropriate people, processes, and technologies in place,” said Dr. Larry Ponemon. “We are encouraged that this is becoming a more important part of an overall IT security strategy.”

Key takeaways from the study include:

  • Companies are experiencing frequent and successful cyberattacks
    • More than half (53 percent) say they suffered at least one data breach in the past two years
    • 74 percent say they faced threats due to human error in the past year
    • When examining the past two years, 74 percent say they have been compromised by malware on a frequent basis, and 64 percent have been compromised by phishing on a frequent basis
  • Organisations can’t maintain operations effectively or recover quickly post-attack
    • 68 percent don’t believe their organisations have the ability to remain resilient in the wake of a cyberattack
    • 66 percent aren’t confident in their organisation’s ability to effectively recover from an attack
  • A lack of planning and preparation is the biggest barrier
    • Only 25 percent have an incident response plan applied consistently across the organisation. Twenty-three percent have no incident response plan at all
    • Only 14 percent test their incident response plans more than one time per year
    • 66 percent cite a lack of planning as their organisation’s biggest barrier to becoming resilient to cyberattacks
  • Ability to respond to a cyberattack has not improved significantly
    • 48 percent say their organisation’s Cyber Resilience has either declined (4 percent) or not improved (44 percent) over the past 12 months
    • 41 percent say the time to resolve a cyber incident has increased or increased significantly, while only 31 percent say it has decreased or decreased significantly

Uma Rajagopal has been managing the posting of content for multiple platforms since 2021, including Global Banking & Finance Review, Asset Digest, Biz Dispatch, Blockchain Tribune, Business Express, Brands Journal, Companies Digest, Economy Standard, Entrepreneur Tribune, Finance Digest, Fintech Herald, Global Islamic Finance Magazine, International Releases, Online World News, Luxury Adviser, Palmbay Herald, Startup Observer, Technology Dispatch, Trading Herald, and Wealth Tribune. Her role ensures that content is published accurately and efficiently across these diverse publications.

Global Banking & Finance Review

 

Why waste money on news and opinions when you can access them for free?

Take advantage of our newsletter subscription and stay informed on the go!


By submitting this form, you are consenting to receive marketing emails from: . You can revoke your consent to receive emails at any time by using the SafeUnsubscribe® link, found at the bottom of every email. Emails are serviced by Constant Contact

Recent Post