PRESS RELEASE
DENVER — June 25, 2024 — Optiv, the cyber advisory and options chief, has revealed its 2024 Menace and Threat Administration Report, which examines how organizations’ cybersecurity investments and governance priorities are maintaining with the evolving risk panorama.
Based mostly on an impartial Ponemon Institute survey, the report reveals a 59% enhance in cyber budgets year-over-year. Moreover, 63% of organizations with greater than 5,000 staff had a median of $26 million allotted to cybersecurity investments in 2024.
The report reveals a big rise in information breaches and safety incidents, with 61% of respondents experiencing a knowledge breach or cybersecurity incident previously two years, and 55% of respondents experiencing 4 or extra incidents in that timeframe. These numbers spotlight the pressing want for organizations to additional prioritize cybersecurity investments and methods.
Obtain the total report: 2024 Cybersecurity Menace and Threat Administration Report
“Cyber incidents are usually not slowing down, which implies organizations should work at a velocity above these of the risk actors attacking their environments. As we see safety budgets growing, many organizations are additionally recognizing the necessity to make sensible investments in course of and governance assessments to make sure compliance,” says Jason Lewkowicz, government vp and chief companies officer at Optiv. “Establishing a extra constant, strategic strategy to safety know-how, course of and other people administration can be important for organizational danger administration and resilience.”
Extra key findings embrace:
-
Safety Software Overload — Whereas organizations are investing in additional applied sciences, 40% of respondents imagine they’ve too many, hindering general effectiveness. In contrast, solely 29% really feel that they’ve the correct variety of instruments. This underscores the necessity for a strategic strategy to cybersecurity funding, specializing in streamlining present instruments and making certain a seamless know-how stack integration.
-
High Funding Areas — The highest three areas of funding for 2024 cybersecurity budgets are inner safety assessments (60%), id and entry administration (IAM) applications (58%) and the acquisition of extra cybersecurity instruments (51%).
-
Lack of Formal Budgeting Practices — Regardless of growing budgets, solely 36% of respondents have a proper strategy to figuring out cybersecurity budgets. This lack of formal budgeting practices can result in inefficiencies and missed alternatives to handle crucial safety gaps.
-
Rising SOAR Adoption — Using safety orchestration automation and response (SOAR) know-how is growing, with 73% of respondents leveraging SOAR to automate incident response actions. This automation will help safety groups reply extra effectively to threats.
Synthetic intelligence (AI) and machine studying (ML) capabilities are one other rising focal space for cybersecurity organizations in search of methods to speed up their risk detection, prevention and course of automation capabilities to maintain up with risk actors who’re additionally utilizing these instruments.
Extra corporations are leveraging AI within the type of use and prevention:
-
44% of respondents use AI/ML to forestall cyberattacks
-
35% bought use-case particular instruments
-
34% use automated processes and audits
Optiv’s report delves deeper into greatest practices employed by high-performing organizations, providing beneficial insights for these in search of to strengthen their cyber defenses. It additionally explores extra challenges, such because the inconsistency of cybersecurity incident response plans (CSIRPs), navigating cyber insurance coverage/governance necessities and the necessity for improved communication of cybersecurity dangers to senior administration.
“Our impartial analysis for Optiv reveals the constructive steps organizations are taking to scale back danger, whereas additionally addressing the challenges they face within the evolving cyber risk panorama,” mentioned Dr. Larry Ponemon, chairman and founding father of the Ponemon Institute. “A part of the complexity organizations proceed to face in coping with threats is because of the variety of ineffective know-how instruments. Recognizing this, IT professionals and senior management have gotten extra cognizant of the significance in strengthening their safety posture, ensuing within the enhance of cybersecurity budgets and allocating funds based mostly on confirmed effectiveness in decreasing safety incidents.”
Findings from Optiv’s report are based mostly on responses from 650 IT and cybersecurity professionals.
For the newest information and updates from Optiv, go to https://www.optiv.com/firm/optiv-newsroom.