Security Market Segment LS
Thursday, 24 June 2021 22:56

94% of security leaders in Asia Pacific do not report directly to CEOs, new tesearch by LogRhythm reveals

By LogRhythm
Joanne Wong, Vice President, International Markets, LogRhythm Joanne Wong, Vice President, International Markets, LogRhythm

IT Security Leaders Are Held Most Responsible For Cyberattacks, Yet Lack the Influence Required to Shore Up Security Strategies

COMPANY NEWS: LogRhythm, the company powering today’s security operations centres (SOCs), today released its latest report, “Security and the C-Suite: Making Security Priorities Business Priorities.” The research, which focuses on the roles and responsibilities of cybersecurity leaders, found that more than half of organisations (55%) in Asia Pacific (APAC) have experienced a cyberattack in the last two years and spend an average of US$17 million each on security activities.

Of these organisations, 43 percent of respondents believe that IT security leaders should be held most accountable for preventing or mitigating the consequence of a cyberattack, compared to the CEO (18%) or both the CEO and IT security leader (22%)..

Security Leaders Shoulder More Responsibility and Risk

Cybersecurity leaders in APAC assume greater accountability and risk for ensuring a strong security posture in the past year (61%), compared with the global average (56%). Specifically, cybersecurity leaders in this region believe that they must contend with risks like phishing and social engineering attacks (61%), ransomware (59%) and device vulnerabilities (58%).

At the same time, while 60 percent of respondents believe that cybersecurity leaders should report directly to the CEO, only six percent of security leaders in APAC actually do. On average, they are three levels away from the CEO, which poses challenges in ensuring that the leadership have an accurate and complete understanding of security risks facing the organisation.

Without securing buy-in from their senior leadership, cybersecurity leaders struggle to establish authority and establish their desired security posture. In fact, only 37 percent of respondents in the region agree that their organisation values and effectively leverages the expertise of their cybersecurity, compared to 43 percent globally. This lack of understanding from senior leadership (52%) and executive support (51%) have subsequently been identified as key factors leading to concerns around job security. 

New Security Pitfalls Stem from the COVID-19 Pandemic

This comes at a time when the Covid-19 pandemic has brought about novel security challenges for cybersecurity leaders. This is especially salient in APAC, with 69 percent of respondents, the highest globally, indicating that their biggest security challenge today is securing the remote workforce.

Across the region, close to 70 percent of organisations have more than a quarter of their employees and contractors working remotely. This poses new threats and increases the risk to their sensitive data, with respondents attributing this to:

  • Employees using less secure home networks (71%)
  • Family members being allowed to use the work device (65%)
  • Security protocols not being followed closely (63%)

The Need to Make Security Priorities Business Priorities

The research also revealed that even amid the rising threat of cyberattacks, only 29 percent of cybersecurity leaders in the region report to the board of directors to brief them on cybersecurity risks. Furthermore,  only 43 percent of them do so reactively after a security incident occurs. 76 percent of organisations also do not have a board-level committee dedicated to cybersecurity threats and issues facing the organisation. 

“In today’s fast-evolving cyber threatscape, security leaders are assuming more responsibility and bearing more risks. However, without organisational visibility and a direct line of contact with their CEO and board of directors, they lack the influence to implement a holistic and mature security program,” said Joanne Wong, Vice President, International Markets, LogRhythm. “It is crucial that organisations recognise the need to adopt cybersecurity priorities as a central plank in their business strategy, and empower their cybersecurity leaders and team with the support and resources they need to safeguard their business effectively.”

The study was conducted in conjunction with Ponemon Institute, and featured 1,426 global respondents, including chief information, technology and security executives. Respondents were located in APAC, EMEA and the United States.

For more information, you may download the full report here, Security and the C-Suite: Making Security Priorities Business Priorities.

About LogRhythm

LogRhythm’s award-winningNextGen SIEM Platformmakes the world safer by protecting organisations, employees, and customers from the latest cyberthreats. It does this by providing a comprehensive platform with the latest security functionality, including security analytics; network detection and response (NDR); user and entity behaviour analytics (UEBA); and security orchestration, automation, and response (SOAR). Learn how LogRhythm empowers companies to be security first at logrhythm.com.


Subscribe to ITWIRE UPDATE Newsletter here

GRAND OPENING OF THE ITWIRE SHOP

The much awaited iTWire Shop is now open to our readers.

Visit the iTWire Shop, a leading destination for stylish accessories, gear & gadgets, lifestyle products and everyday portable office essentials, drones, zoom lenses for smartphones, software and online training.

PLUS Big Brands include: Apple, Lenovo, LG, Samsung, Sennheiser and many more.

Products available for any country.

We hope you enjoy and find value in the much anticipated iTWire Shop.

ENTER THE SHOP NOW!

INTRODUCING ITWIRE TV

iTWire TV offers a unique value to the Tech Sector by providing a range of video interviews, news, views and reviews, and also provides the opportunity for vendors to promote your company and your marketing messages.

We work with you to develop the message and conduct the interview or product review in a safe and collaborative way. Unlike other Tech YouTube channels, we create a story around your message and post that on the homepage of ITWire, linking to your message.

In addition, your interview post message can be displayed in up to 7 different post displays on our the iTWire.com site to drive traffic and readers to your video content and downloads. This can be a significant Lead Generation opportunity for your business.

We also provide 3 videos in one recording/sitting if you require so that you have a series of videos to promote to your customers. Your sales team can add your emails to sales collateral and to the footer of their sales and marketing emails.

See the latest in Tech News, Views, Interviews, Reviews, Product Promos and Events. Plus funny videos from our readers and customers.

SEE WHAT'S ON ITWIRE TV NOW!

BACK TO HOME PAGE
Share News tips for the iTWire Journalists? Your tip will be anonymous

WEBINARS ONLINE & ON-DEMAND

GUEST ARTICLES

VENDOR NEWS

Guest Opinion

Guest Interviews

Guest Reviews

Guest Research

Guest Research & Case Studies

Channel News

Comments