Cisco's annual Security Outcomes Report shows executive support for a security culture is growing. The report identifies the top seven success factors that boost enterprise security resilience, with a focus on cultural, environmental, and solution-based factors that businesses leverage to achieve security.
A whopping 62% of surveyed organizations share that they have experienced a security event in the past two years which impacted business, with common types of incidents being network or data breaches (51.5%), system outages (51.1%), ransomware events (46.7%) and distributed denial of service attacks (46.4%).
These incidents had harsh consequences for the companies that went through them, as well as the other businesses they work with. The most common effects were IT and communication problems (62.6 percent), supply chain disruptions (43 percent), weakened internal operations (41.4 percent) and long-term damage to their reputation (39.7 percent).
The findings of the report reveal that security resilience is a top priority for 96 percent of surveyed executives. Furthermore, preventing incidents and mitigating losses are the main objectives for security leaders and their teams when it comes to security resilience.
A few highlights:
- Organizations that report poor security support from the C-suite scored 39 percent lower than those with strong executive support.
- Advanced extended detection and response capabilities correlated to an incredible 45 percent increase for organizations over those that report having no detection and response solutions.
- Businesses that report an excellent security culture scored 46 percent higher on average than those without.
It is loud and clear that an ounce of prevention is worth a pound of cure. Stepping your employees through new-school security awareness training, and enabling them to easily report suspicious emails that can quickly be responded to is an extremely efficient way to scientifically test and improve your security culture.
More detail and a link to the report itself is at Cisco's blog here.
