IT security services

The growing volume and complexity of cyber-attacks appears finally to be pushing more organizations to rely on external IT security expertise.

Just over a third (37%) of respondents from companies of all sizes report knowing their organization was a victim of a serious cyber-attack in the last five years. For organizations that generate more than $500 million in revenue, that number is 43%.

Just under half (49%) think they will be hit by a serious cyber-attack in the next three years. Another 25% said it’s very likely. Another 23% said it is unlikely.

Just under half (48%) say they have a clear chain of command for reporting and responding to IT security incursions. Another 40% say they somewhat agree they have one.

Just over a third (35%) say they rely on third parties to manage all or most of their IT security operations. Another 27% say they use commercial software they manage themselves, while 17% say they have developed their own tools in-house. Another 20% say they use all three approaches.

Telecommunications carriers and internet service providers (ISPs) are seen as the most vulnerable (33%), followed closely by financial networks (27%).

Just under a third (30%) ranked increasing their companies’ security budgets as the highest priority. Another 25% identified clear organization policies, followed by 18% citing the need for clearer government policies.

A full 80% either agree or somewhat agree that big data and the internet of things will wind up making their organizations more vulnerable to serious cyber-attacks.

Nearly nine in 10 (88%) say their local municipality needs to be more alert to potential IT security issues, with 36% identifying CXOs of infrastructure services as being the individuals that should be held most accountable.