IT Security

IT security is a higher priority than in the past, but nearly half those polled said their companies’ existing security products and processes are good enough.

44% say IT security is now a significantly higher priority today than it was two years ago, while 48% say it is a moderately higher priority.

Almost half (47%) say IT security will be a significantly higher priority two years from now, while 43% said it would be a moderately higher priority.

Satisfaction with IT security ranges from a low of 43% in small businesses to a high of 49% in large organizations.

Modifications to IT operations (51%), followed by reports of security breaches (46%), an actual security incident (40%) and training (39%) are the top drivers of change to companies’ IT security posture.

A key challenge lies in the fact that nearly half (47%) cite the belief that their IT security is good enough. Other priorities (43%), lack of security metrics (39%) and lack of budget (37%) were also cited as top inhibitors to instituting IT security changes.

Just over half of IT organizations say there is no IT security skills gap inside their organization. Less than 10% say they have a major skills gap.

Two-thirds (66%) say they focus on end-user training, followed by adding IT security certifications, at 56%. Another 41% say they partner with external firms.

A full 71% rated the security mindset of the workforce as advanced, with nearly half regularly engaged in training employees on IT security risks and best practices.