Most Security Professionals Say Current Security Tools Are Not Enough Protection - Jinz Haiggh Blog

Header Ads

Most Security Professionals Say Current Security Tools Are Not Enough Protection

A recent Tripwire survey at the Infosecurity Europe 2017 Conference in London was an eye-opening experience. Tripwire is a leading security provider. The company offers IT operations and compliance solutions for service providers, industrial organizations, large and small businesses and government agencies. Tripwire solutions combine deep endpoint intelligence with high-fidelity asset visibility and the company incorporates those elements into a business solution that automates and integrates IT operations and security. 

According to the survey, more than 350 information security executives do not believe purchasing every security tool on the market is enough to protect their businesses. Half of the executives said they have many of these tools now, and they don’t fulfill the needs of their organization. The vice president of product management and strategy at Tripwire, Tim Erlin, said, “new tools and technologies enter the information security market all the time, but it’s clear that many of them simply don’t meet the needs of the market.” 

Erlin and other security executives focus on the basic security tools that fly under the industry’s radar because they work. The biggest bang for the security buck is making sure the foundation for security controls are in place, according to Erlin. Finding breeches and patching security vulnerabilities are important security steps. Making sure monitoring systems are current and configuring security systems so they are up-to-date are the basics. 

The survey brought up the fact that employees in the larger companies have less confidence in the current cyber security tools. Thirty-two percent of the employees in companies with less than 1,000 employees believe the current cyber security tools will not protect their company. In companies with 1,000 to 5,000 employees, only 19 percent of those employees believe their company will benefit from the current security tools. And when a company has 5,000 or more employees the percentage of believers drops dramatically. 

The survey is a good example of the current gap between security systems and the beliefs about them. And the reason for the gap is the amount of press security breaches get in the press. The truth is basic security controls will protect businesses without the help of the latest security tools. But the cost saving ideas telecom companies promote add an extra layer of comfort to companies with security and data usage concerns. Mobile devices give employees a sense of freedom, and they often use those devices to access sites that can be disruptive and dangerous. Companies like Wandera have apps that will create custom notifications when data thresholds are in jeopardy. And there are user controls in place to prevent employees from visiting sites that are security risks. 


The recent attacks by WannaCry, Petva, and Heartbleed are not the norm, according to the Infosecurity Europe 2017 survey. Those attacks hit businesses that use unpatched and outdated security systems. Those security villains could compromise business systems because the organizations did not pay attention to basic security hygiene. Damaging attacks happen when businesses feel confident without putting effort and money into their basic security system. 



1 comment:

Powered by Blogger.