The rapid migration to cloud-based technologies is the biggest disrupter worldwide of operations and a key driver when organisations plan their spending increases, according to the results of the latest SANS 2020 Cybersecurity Spending Survey.<\/p>\n\n\n\n
\u201cThe SANS survey showed that rapid movement of\ncorporate services and business applications to cloud-based technology is the\nbiggest factor causing breakage in existing security architectures as well as\ndriving most new security spending,\u201d said John Pescatore, SANS Director of\nEmerging Security Trends. <\/p>\n\n\n\n
\u201cCloud monitoring and cloud security\naccess controls were the top two spending areas, followed by spending to\nincrease security staff skills to deal with new technologies, such as the\ncloud, and to keep up with changes in regulations as well as new threats.\u201d<\/p>\n\n\n\n
Slightly more\nthan 50% of respondents ranked the increased use of public cloud Infrastructure-as-a-Service\n(IaaS) implementations as the biggest disrupter to security programmes in the\nnext 12 months. Based on that, 71% of respondents reported seeing a need to\nincrease spending on cloud security monitoring, followed by cloud access\nsecurity broker cloud-specific tools (53%), staff skills training (52%) and\nstrong authentication (46%). <\/p>\n\n\n\n
Overall, 57%\nof respondents feel that out of people, process and technology, an increased\ninvestment in people would provide the biggest improvement to their overall\nsecurity posture, followed distantly by process (19%) and technology (18%). <\/p>\n\n\n\n
\u201cManagers see increased and refreshed\nskills in their existing staff as being significantly more critical than simply\nincreasing headcount,\u201d said Barbara Filkins, SANS Analyst Program Research\nDirector and author of the report. <\/p>\n\n\n\n
\u201cThe fact that respondents prioritise\nincreasing staff skills significantly over increasing headcount to deal with\n\u2018disruptive technologies,\u2019 especially when faced with escalating privacy\nregulations – and fines – worldwide, is not surprising. Business use of IaaS\nand hybrid cloud requires re-architecting security controls and integrating\nwith CI\/CD methodologies.\u201d<\/p>\n\n\n\n
In a series of follow-up interviews\nwith selected survey respondents, security managers recognise the need for \u2018upskilling\u2019\nto increase retention rates, which improves both effectiveness and efficiency.\nIncreased skills around new technologies and new security techniques is also\nrequired to enable any use of security automation technologies, which were not\nhighly cited for spending increases in 2020.<\/p>\n\n\n\n
Strong authentication, the fourth\nmost highly cited area of planned new spending, points to the recognition that\nthe majority of damage from breaches and ransomware attacks in the past year\nwere enabled by the use of reusable passwords that were easily captured via\nphishing attacks. CEOs and boards of directors are backing security teams in\novercoming obstacles to implementing multifactor authentication.<\/p>\n\n\n\n
The survey and associated report were sponsored by ExtraHop,\nGigamon and Netskope, with more than 450 survey respondents. <\/p>\n","protected":false},"excerpt":{"rendered":"
The rapid migration to cloud-based technologies is the biggest disrupter worldwide of operations and a key driver when organisations plan their spending increases, according to the results of the latest SANS 2020 Cybersecurity Spending Survey. \u201cThe SANS survey showed that rapid movement of corporate services and business applications to cloud-based technology is the biggest factor […]<\/p>\n","protected":false},"author":25,"featured_media":37127,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[6587,4,57,6617,93],"tags":[12548,25,564,10822,9659,14324,9186,1403],"class_list":["post-37126","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-analysis","category-cloud","category-enterprise-security","category-research","category-top-stories","tag-barbara-filkins","tag-cloud","tag-cybersecurity","tag-extrahop","tag-gigamon","tag-john-pescatore","tag-netskope","tag-sans"],"acf":[],"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/posts\/37126","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/comments?post=37126"}],"version-history":[{"count":0,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/posts\/37126\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/media\/37127"}],"wp:attachment":[{"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/media?parent=37126"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/categories?post=37126"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/tags?post=37126"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}