TIME TO RETHINK ENTERPRISE IT SECURITY - Black Hat 2015 Attendee Survey

TIME TO RETHINK ENTERPRISE IT SECURITY 2015 Black Hat Attendee Survey 460 top-level security experts were surveyed, including leading ethical hackers, IT security management, and technology developers RITIES AND RES RCES A TROUBLING DISPARITY PRI 11 10 10 01 1100001110 Application flaws consume a great deal of time, yet are seldom considered the greatest threats Top Concerns For IT Security Pros Most Time-Consuming Tasks 1 Sophisticated attacks targeted directly at the organization Vulnerabilities introduced by 1 internally developed software Phishing, social network 2 Vulnerabilities introduced through 2 off-the-shelf applications exploits Accidental data leaks by 3 end users Phishing, social network 3 exploits Budgets are failing to keep up with latest threats and security pros are unable to adjust spending to meet their top concerns Consuming Greatest Portion of IT Security Budget 1 Accidental data leaks by end users %24 Sophisticated attacks targeted directly at the organization Internal mistakes or external attacks that cause loss of compliance What Lies Ahead When Internet of Things (IoT) threats begin to affect enterprise systems, most organizations will not have set aside enough time or budget to manage those effects: 369% 3% Today, only believe digital attacks on non-computer devices and systems - loT will be of greatest concern 2 years from now of respondents say loT security constitutes a top security priority in either time or budget INCREASING THREATS HIGHLIGHT SHORTAGE OF SECURITY RESOURCES 73% 9 66% expect their organization to deal with a major data breach in the year ahead don't have enough security budget 73% i 64% sE say their organization doesn't have enough security staff don't have enough skills and training The combination of these responses should ring warning bells to the industry that security defense strategies and resources need serious rethinking. Data: 2015 Black Hat Attendee Survey of 460 security professionals blackhat