The majority of UK IT security professionals feel they\u2019re suffering from an image problem among fellow workers, according to new research commissioned by Thycotic, a provider of privileged access management (PAM) solutions for more than 10,000 organisations worldwide.<\/p>\n
Nearly two thirds of respondents (63%) feel that their security teams are either viewed as the company naysayers \u2013 specifically either \u2018doom mongers\u2019 or a \u2018necessary evil\u2019 (36%). Also, 27% of respondents said company security and security professionals are just something that runs in the background which employees don\u2019t really notice.<\/p>\n
The research, which was conducted with 100 IT security decision makers within the UK, revealed that more than a third of respondents (38%) believe that they\u2019re viewed as the \u2018policemen.\u2019 Worryingly, when asked if they\u2019d ever experienced negativity towards their team and their work, 13% said this happens \u2018all the time.\u2019<\/p>\n
Almost three quarters (74%) of security professionals reported negativity or indifference regarding the introduction of new security measures and policies: with employees believing it will hamper their work (35%)\u00a0or barely noticing them (39%).<\/p>\n
Security professionals are also struggling to promote their value to other departments in the business. The overwhelming majority of them (90%) believe that other departments could have a better understanding of what they\u2019re trying to achieve, whilst an equally high majority (88%) feel that it could be easier to communicate their views to executive management in other functions such as HR and finance.<\/p>\n
Execs feel board perceives them as functional, not a force for competitive advantage<\/strong><\/p>\n When it comes to how they\u2019re perceived by the c-suite, there are further challenges: 56% feel that they\u2019re restricted by the board, which may be accounted for by the fact that only 41% of organisations have a CISO in place on the board. While the security team can be instrumental in business transformation, only 44% believe that the c-suite sees them as a positive force for innovation and just one in 10 respondents (13%) believe that the board sees them as helping the company to gain a competitive advantage.<\/p>\n It also suggests that boards may be paying lip service to IT security teams, as there is a disparity between what the board says and how this translates into investment. While 87% of security professionals believe that the board listens to them and values their input, a considerable proportion (62%) believe that the board can\u2019t always see the business case for security investments.<\/p>\n Commenting on the findings, Joseph Carson, Chief Security Scientist and Advisory CISO at Thycotic, said: \u201cAt a time when security teams are under huge pressure and play an increasingly strategic role within the company, it\u2019s disappointing that they\u2019re not feeling valued either by their co-workers or by senior executives. The fact that negative opinions are rife among employees also suggests that security teams need to work harder to communicate the strategic importance of their roles to the business and reinvent themselves as \u2018facilitators\u2019 rather than \u2018enforcers\u2019 who enable the business to run smoothly.\u201d<\/p>\n He continues: \u201cClearly instrumental in this will be achieving a greater representation of CISOs at board level and improving cross-departmental communications.\u201d<\/p>\n