​Dell: Why a lack of security knowledge is limiting business initiatives

While the C-suite recognises the benefits of data security, organisations are still struggling to develop programs that effectively incorporate security strategies without detracting from other business initiatives.

Even with tools in place to address data security needs, the first Dell Data Security Survey claims that business and IT decision makers report gaps in their comfort level with implementing or expanding programs that rely on these technologies.

In addition, the survey found that security concerns are limiting the adoption of cloud and mobility solutions throughout organisations.

As explained in the report, data security has become a priority for C-suite executives, with keeping ahead of the threats remaining a chief concern.

Delving deeper, while the C-suite is more invested in data security than in the past, IT teams feel executives are still not allocating the energy or resources needed to properly address data security challenges.

Consequently, nearly three in four decision makers agree that data security is a priority for their organisation’s C-suite; however, one in four decision makers don’t find their C-suite to be adequately informed about data security issues.

Furthermore, three in four decision makers say their C-suite plans to increase current security measures, and more than half expect to spend more money on data security in the next five years.

Cost is also a concern when it comes to building on existing programs, with 53 percent of respondents citing cost constraints for why they don’t anticipate adding additional security features in the future.

As such, only one in four decision makers are very confident in their C-suite’s ability to budget enough for data security solutions over the next five years.

“These findings suggest that the C-level has to be more engaged when it comes to integrating data security strategies into their business,” says Steve Lalla, Vice President of Commercial Client Software and Solutions, Dell.

“Business leaders understand the need to invest in their security infrastructure, but that isn’t translating into updating or expanding their current systems to adequately prevent modern attacks.”

IT support

Despite increased buy-in from the C-suite, Lalla believes IT departments still need more business support to fully integrate data security.

The report found that a lack of investment in streamlined technologies and a shortage of talent are both barriers to fine-tuning data security programs.

The majority of decision makers (58 percent) believe that their organisation is adversely affected by the shortage of trained security professionals in the industry while 69 percent of decision makers still view data security as a burden on their time and budget.

Still, nearly half (49 percent) of respondents believe they need to spend more time securing their data in the next five years than they are today - 76 percent believe their solutions would be less burdensome if provided through a single vendor.

“These findings show that the costs and time constraints that commonly accompany traditional single point solutions have an adverse impact on IT departments,” Lalla adds.

“For companies with hundreds or thousands of employees, managing each endpoint separately using multiple consoles is extremely inefficient and leads to a high probability of conflict or incompatibility.

“Implementing a single, integrated suite for IT management can drastically improve this process.”

Malware

The report showed that respondents remain highly concerned about malware, despite the fact that most have anti-malware solutions in place.

Nearly three in four (73 percent) decision makers are somewhat to very concerned about malware and advanced persistent threats.

Concern over malware threats is highest in the United States (31 percent very concerned), France (31 percent very concerned) and especially India (56 percent very concerned) – while it’s a lesser concern in Germany (11 percent very concerned) and Japan (12 percent very concerned).

Page Break

In addition, only one in five respondents are very confident in their ability to protect against sophisticated malware attacks with respondents more worried about spear phishing attacks (73 percent are concerned) than any other breach method.

“The fact that IT and business decision makers are not confident in their anti-malware defence implies that they may be using outdated or ineffective tools,” adds Brett Hansen, Executive Director of Data Security Solutions, Dell.

“When IT teams do not have the resources they need to proactively prevent threats and stay on top of the evolving threat landscape, they are forced to play defence using threat detection and remediation alone.”

Mobility

As Hansen explains, employers feel they have to limit mobility in order to protect data.

“The common narrative is that all offices are becoming more mobile, but according to this report, the truth is somewhat more complicated,” he adds.

Hansen says the majority of mid-market companies (65 percent) are holding back plans to make their workforce more mobile for security reasons with 67 percent hesitant to introduce a bring-your-own-device (BYOD) program.

While 82 percent of decision makers have attempted to limit data access points to enhance security, 72 percent of decision makers believe that knowing where data is accessed will make their data protection measures more effective.

Going further, Hansen says 69 percent of respondents say they are still willing to sacrifice individual devices to protect their company against a data breach, yet 57 percent of respondents are still concerned about the quality of encryption used by their company.

Security concerns aside, two in five respondents are interested in allowing greater mobility for enhanced employee productivity.

“When organisations opt out of creating sanctioned, secure mobility programs, they open themselves up to other risks,” Hansen adds.

“Mobility and security can easily co-exist with modern data security technology that uses intelligent encryption to protect data whether it’s at rest, in motion or in use.”

Public Cloud

With more employees using public cloud services like Box and Google Drive in the workplace, Hansen claims decision makers are not confident in their ability to control risks posed by these applications.

Nearly four in five respondents are concerned with uploading critical data to the cloud, and 58 percent are actually more concerned than they were a year ago.

According to findings, 38 percent of decision makers have restricted access to public cloud sites within their organisation due to security concerns.

At present, 57 percent of decision makers who are current cloud users, and 45 percent of those planning to use public cloud platforms, will rely heavily on cloud vendors to provide security.

Hansen says only one in three organisations cite improving secure access to public cloud environments as a key focus for their security infrastructure, yet 83 percent say that employees are either using, or will soon be using, public cloud environments to share and store valuable data.

“Security programs must enable employees to be both secure and productive, and this means enabling technology that helps them do their jobs,” Hansen adds.

“Companies can try to limit or prohibit public cloud use, but it’s more effective to use intelligent data encryption to protect corporate data wherever it may go, and reduce the risk of employees working around restrictive policies in order to be productive.”