survey

now browsing by tag

 
 

Exclusive survey: Teens dislike online learning | #socialmedia | #children | #parenting | #parenting | #kids

Most American teens think online school is worse than going in person, but less than a fifth of them think that it makes sense to be in person full-time while […] View full post on National Cyber Security

#cybersecurity | #hackerspace | Survey: Enterprises Losing Confidence in SD-WAN Security

Source: National Cyber Security – Produced By Gregory Evans

A recent survey commissioned by CATO Networks reveals that enterprises that deployed SD-WANs were less confident in their networks after undergoing digital transformation. The survey polled 1,333 IT professionals worldwide and provided insights into the 2020 budgets, challenges and digital transformation readiness of enterprises.

The survey asked respondents about the state of digital transformation within their organizations and how it affected their confidence in their networks to support it. Four primary characteristics were measured: agility, security, performance and management and operations. The survey also looked at the level of confidence that respondents had in their SD-WAN architecture after completing a digital transformation project. Results were grouped by the respondent’s network architecture, such as MPLS, SD-WAN or SASE (secure access service edge). 

For the most part, respondents noted that a disconnect between SD-WAN selection and digital transformation planning undermined overall confidence in their SD-WAN’s ability to meet future needs. Nearly three-quarters (74%) of SD-WAN respondents expressed having significantly less confidence in their networks post-digital transformation. What’s more, 69% of respondents cited that confidence in the ability to connect to the cloud dropped post-digital transformation.

Those statistics reveal that many enterprises are not viewing the symbiotic relationship of SD-WAN deployment and the digital transformation process. Most of the respondents (56%) primarily considered SD-WAN adoption as a way to reduce WAN costs. After all, SD-WAN technology is promoted as a way of bringing management and intelligence into wide-area networking as a way to make connectivity more economical. 

However, digital transformation drives different factors in an enterprise, such as transforming legacy applications into cloud-delivered services. That can impact the selection of SD-WAN solutions. Most enterprises move to SD-WAN primarily because of site-related issues but digital transformation involves more than connecting sites, especially when it comes to security.

For example, only 37% of respondents claimed to be able to protect locations from threats post-deployment, even though most respondents (66%) prioritized defending against malware/ransomware. Further illustrating the security challenges is that some 52% of respondents made enforcing corporate security policies on mobile users a primary security challenge for 2020, something that SD-WANs typically are not capable of. That realization has led some to seek platforms beyond the typical SD-WAN.

Case in point is secure access service edge (SASE), a market segment recently defined by Gartner that converges networking and security into a global, cloud-native service using SD-WAN to connect sites, client/clientless access for mobile users and native cloud integration to support cloud resources. Although it is an emerging technology, some 62% of respondents believed that a SASE architecture would increase the level of confidence in the network post-digital transformation. 

The survey also asked respondents about their connectivity plans for 2020. More than half (56%) of respondents expect their networking budgets to grow in 2020. The vast majority (73%) of respondents indicate the same is true for their security budgets. SD-WANs also seem to be on the top of most respondents’ minds, with 66% expecting to have some kind of an SD-WAN deployed by the end of 2020. Respondents also noted their top three primary networking challenges for 2020 were related to site connectivity, with 46% stating that bandwidth costs remained a challenge, 44% citing network management as a challenge and 46% saying the same about performance between locations.

Related Stories

While there are still many concerns around SD-WAN platforms, numerous vendors are promoting technologies such as SASE or other security-focused WAN solutions as a way forward. With budgets set to increase, more options will become readily available to those seeking to deploy SD-WANs that are easy to both manage and secure and improve performance. Primary players in the space include Cato Networks, Cisco Systems, Cloudflare, Fortinet, Palo Alto Networks and Zscaler, with Gartner expecting several vendors to have complete SASE portfolios by the end of 2020.  

Source link

The post #cybersecurity | #hackerspace |<p> Survey: Enterprises Losing Confidence in SD-WAN Security <p> appeared first on National Cyber Security.

View full post on National Cyber Security

The State of Security Breach Protection 2020 Survey Results

Source: National Cyber Security – Produced By Gregory Evans What are the key considerations security decision-makers should take into account when designing their 2020 breach protection? To answer this, we polled 1,536 cybersecurity professionals in The State of Breach Protection 2020 survey (Download the full survey here) to understand the common practices, prioritization, and preferences […] View full post on AmIHackerProof.com

#cybersecurity | Negligent Users are Biggest Cybersecurity Threat to German Organizations: Survey

Source: National Cyber Security – Produced By Gregory Evans

You are only as strong as your weakest link and the cybersecurity industry is no different. A recent survey by SolarWinds, a provider of IT management software, pointed out that negligent users are the biggest cybersecurity threat to German organizations. The company did the survey in a bid to highlight the threats the cybersecurity professionals are facing daily.

The research, which surveyed over 100 information technology professionals from Germany, stated that user errors constituted the largest share of cybersecurity incidents in the last 12 months, at a whopping 80 percent. The study stressed on the fact that internal factors are the most pressing cybersecurity threats. User errors were followed by exposures caused by poor network system or application security at 36 percent, and external actors infiltrating the company’s network at 31 percent.

To understand the factors contributing to the trend, the survey also found out that poor passwords were one of the major concerns for German techies. Nearly 45 percent of the respondents stated that poor and weak passwords were one of the biggest reasons for the breaches, while 42 percent of the respondents stated that sharing passwords is also another grave contributor. Other factors were accidental exposure, deletion, modification of critical data and even copying data into unsecured devices.

To top it all, it was also revealed that 89 percent of IT experts felt that they were unequipped to successfully implement and manage cybersecurity tasks today, with their current IT skillset.

“Our research shows once again that the biggest risk to the organization comes from the inside, aligning with research SolarWinds conducted in other regions earlier this year,” said Tim Brown, vice president of security, SolarWinds. “This underscores the continued need for organizations to address the human side of IT security and consistently educate users on how to avoid mistakes while encouraging an environment of learning and training. However, that alone is not enough; tech pros also need the best possible technology to effectively fight against both threats from the inside and potentially more sophisticated threats from the outside. SolarWinds is committed to helping IT and security teams by equipping them with powerful, affordable solutions that are easy to implement and manage. Good security should be within the reach of all organizations.”

It is not always an accidental error from insiders; sometimes these incidents are a part of a much larger scheme. Earlier this year, a recruiter from the telecommunications company AT&T Network was charged for paying insiders to upload malware on the company’s computer networks to unlock cell phones.

According to the United States Department of Justice (DOJ), the insiders, who worked in AT&T’s Bothell Customer Service Center, allegedly exploited AT&T’s proprietary locking software to remove millions of phones from the AT&T network system and payment plans, which incurred a loss of a million dollars to the company. It’s said that Fahd and his co-conspirators gave over $1 million in bribes to install malware and spying devices in the company.

Source link
____________________________________________________________________________________________________________________

#infosec #itsecurity #hacking #hacker #computerhacker #blackhat #ceh #ransomeware #maleware #ncs #nationalcybersecurityuniversity #defcon #ceh #cissp #computers #cybercrime #cybercrimes #technology #jobs #itjobs #gregorydevans #ncs #ncsv #certifiedcybercrimeconsultant #privateinvestigators #hackerspace #nationalcybersecurityawarenessmonth #hak5 #nsa #computersecurity #deepweb #nsa #cia #internationalcybersecurity #internationalcybersecurityconference #iossecurity #androidsecurity #macsecurity #windowssecurity
____________________________________________________________________________________________________________________

The post #cybersecurity | Negligent Users are Biggest Cybersecurity Threat to German Organizations: Survey appeared first on National Cyber Security.

View full post on National Cyber Security

Companies #sacrifice #security for #mobile #convenience, survey #finds

Ninety-three percent of organizations recognize that mobile devices present a serious and growing security threat, yet many organizations are failing to take even the most basic precautions, according to a recent report by Verizon.

Almost a third of respondents even admitted to having sacrificed mobile security to improve expediency and/or business performance.

“I think they agree it’s a threat, however they’re probably not as comfortable with the precautions they need to be taking,” says Justin Blair, executive director of business wireless services for Basking Ridge, New Jersey-based Verizon. “There’s a level of awareness that needs to be raised about what are the best practices and how to easily implement them.”

Malware, ransomware and device theft or loss emerged as the top threats that companies are concerned about, and are most likely to cause incidents, according to Verizon’s 2018 Mobile Security Index.

Malware is suspicious software that can infect a device, says Gary Davis, whose title at Santa Clara, California-based cybersecurity company McAfee is chief consumer security evangelist. Ransomware is a type of malicious software that takes over a device until a ransom is paid.

McAfee Labs detected more than 16 million mobile malware infestations in the third quarter of 2017 alone, nearly double the number it saw a year earlier.

Many of these threats can be avoided with some simple education and precautions, Davis says.

First, have your employees download a virtual private network (VPN), which establishes an encrypted channel between your device and the internet, he says. Also encourage them to use unique passwords and pins on their device, he says, noting some people disable these functions.

Only one in seven companies surveyed had four basic security practices in place, including changing all default passwords and encrypting data sent over public networks, Blair says.

Only 49 percent of firms have a policy regarding the use of public Wi-Fi, and only 47 percent encrypt the transmission of sensitive data across open, public networks, according to the Verizon report.

Beyond transmitting data across secure networks, another best practice is to update your apps and encourage employees to do the same, says Adam Schwam, president of Farmingdale-based Sandwire Corp., an information technology firm.

“You’re supposed to update them regularly because there could be security holes in them,” he says.

Still, with so many companies allowing or requiring employees to use their own devices, it gets harder to control what employees do with their phones, he says.

It may pay to issue company-owned mobile devices because they give you greater control from an application standpoint, Schwam says.

“If companies do provide a phone, they have the ability to control everything,” he says.

William Collins, president of NST Inc., an East Northport IT services company, understands this, and that is why he issues his employees their mobile devices.

He also uses mobile device management software that allows him to wipe clean a potentially compromised device, stop emails, etc.

“It helps protect intellectual property on the phone if an employee leaves or it’s stolen,” Collins says.

Beyond that, it pays to have mobile device policies in place, says Shari Claire Lewis, a partner in privacy, data and cyber law at Uniondale-based Rivkin Radler LLP.

This policy should include a requirement that a device be protected by a “robust” password that is changed frequently and that the company has the right to wipe out the contents of the device under certain circumstances, she said.

In terms of best practices, it also pays when dealing with confidential or proprietary information that employees not sign into unprotected public Wi-Fi, Lewis says.

Policies, of course, may vary depending upon the firm.

“Your mobile standards require a reasonableness approach that takes into account the sensitivity of the data you’re accessing and the circumstances in which you access it,” she says.

advertisement:

The post Companies #sacrifice #security for #mobile #convenience, survey #finds appeared first on National Cyber Security Ventures.

View full post on National Cyber Security Ventures

Salaries Will #Increase for #Cybersecurity #Jobs, Survey #Says

Source: National Cyber Security – Produced By Gregory Evans

After another record-setting year for cybercrime, security professionals are in line for a well-deserved raise, according to recent research.

The “Robert Walters Salary Survey 2018” predicted that salaries for cybersecurity jobs around the world will rise by 7 percent in 2018. In addition, the recruitment firm estimated that all IT roles will see an average increase of 2 percent in salary.

Read More….

The post Salaries Will #Increase for #Cybersecurity #Jobs, Survey #Says appeared first on National Cyber Security Ventures.

View full post on National Cyber Security Ventures

Advanced #threats and #insider security #threats top #enterprises’ #cybersecurity #concerns, finds #Alert #Logic survey

Source: National Cyber Security – Produced By Gregory Evans

Alert Logic, a Security-as-a-Service provider for the cloud, has announced the results of a survey conducted with 400 UK cybersecurity professionals to better understand the evolving cyber threat landscape UK companies face.

The survey found that respondents’ confidence in their organisations’ overall cybersecurity posture is moderate to high, with only a fifth (21%) indicating they are not at all, or only slightly, confident in their organisation’s security posture.

When asked about the top challenges facing their cybersecurity teams, respondents cited detection of advanced threats (62%) and detection and/or mitigation of insider threats (48%) as the two top security challenges. Furthermore, 41% lacked advanced security staff to oversee cyber threat management and nearly a third (27%) lacked confidence in their automation tools catching all cyber threats.

“Advanced cyber threats present the most arduous task for cybersecurity professionals, and the survey results bear this out,” said Oliver Pinson-Roxburgh, EMEA director at Alert Logic. “Cyber attacks are increasingly difficult to detect, as the security threats presented by malicious actors become increasingly bold and sophisticated, particularly when attacking web applications.”

Lack of budget (51%), skilled personnel (49%) and lack of security awareness amongst employees (49%) weighed in as the most significant obstacles facing cybersecurity teams, inhibiting their organisations from adequately defending against cyber threats. In addition, when asked about the business impact of security incidents, system downtime was highlighted as having the biggest impact.

Interestingly, revenue impact was only cited as a relatively minor factor (16%), suggesting that either security teams have evolved their maturity to effectively manage risk or lack full visibility into the downstream business impact of security incidents.

Respondents were asked about the likelihood of their organisation being compromised by a successful cyber attack in the next 12 months, compared to last year. Here, the survey found a remarkably even distribution of expectations. Roughly one third (32%) expected that a compromise was likely, while a slightly smaller number (29%) felt that a compromise was less likely.

“Lack of cybersecurity awareness and budget create a strain on an organisation’s ability to combat advanced cyber threats,” said Pinson-Roxburgh. “Organisations must foster an inclusive security culture, and consider security service models if they don’t have the budget for in-house expert security staff; otherwise organisations will continue to expose their IT infrastructure and their sensitive data to risks.”

The post Advanced #threats and #insider security #threats top #enterprises’ #cybersecurity #concerns, finds #Alert #Logic survey appeared first on National Cyber Security Ventures.

View full post on National Cyber Security Ventures

Modernization boosts cybersecurity anxieties, survey says

Source: National Cyber Security – Produced By Gregory Evans

When it comes to protecting the government’s IT infrastructure from cyberattacks, conventional wisdom has long held that modernization of outdated legacy systems can be a key driver of improved security. The results of a survey released Sept. 6 challenged that conventional wisdom. The poll, conducted by Unisys found that a…

The post Modernization boosts cybersecurity anxieties, survey says appeared first on National Cyber Security Ventures.

View full post on National Cyber Security Ventures

Hong Kong firms fear cybersecurity and economic risks most, says survey

Source: National Cyber Security – Produced By Gregory Evans

Cybersecurity, economic downturn, regulatory and financial risks are Hong Kong executives biggest worries in 2017, a survey looking at the extent to which Hong Kong-listed companies have embedded risk management in their businesses found. Findings in the report of the survey by KPMG and the Hong Kong Institute of Chartered…

The post Hong Kong firms fear cybersecurity and economic risks most, says survey appeared first on National Cyber Security Ventures.

View full post on National Cyber Security Ventures

Nearly half of businesses have no cyber security policy, survey finds

Source: National Cyber Security – Produced By Gregory Evans

Nearly half of businesses have no cyber security policy, survey finds

ALMOST half of businesses who took part in a survey had no policies on data security, cyber security or data protection. The research also showed a low take-up of the government-backed Cyber Essentials Scheme, with only two per cent accredited under the scheme. The figures are from Mark Gracey, owner of Flavourfy, an independent digital consultancy specialising in digital marketing, …

The post Nearly half of businesses have no cyber security policy, survey finds appeared first on National Cyber Security Ventures.

View full post on National Cyber Security Ventures