Report | Cyber Security, 2017

/live_board/v2/downloads?uid=32294087-6a1e-4c26-a306-74eff7879835&redirect=true

WELCOME TO THE FUTURE OF CYBER SECURITY

CYBER SECURITY 2017 S U R V E Y

CLOUD SECURITY 2016 SURVEY

The future is no longer on a distant horizon: Mobility has overtaken the desktop as a fundamental part of how business is conducted; cloud adoption is prompting businesses to transform how they roll out applications and services with the promise of a more agile and automated IT infrastructure; IoT is connecting greater numbers of devices; and big data is gathering information on everything from telemetry readings of sensors to how many calories have been burned during an afternoon walk. The security implications among all of these elements are significant. The sophistication of modern malware combined with the fact that our networks are more interconnected than ever means we are all vulnerable. Despite all the money spent on cyber security, networks are continually breached and the severity of attacks seems to be on the rise. That begs the question: Are we taking the right actions and investing in the right places? Also, is our security strategy in alignment with rapidly changing business needs or are we leaving our networks, endpoints and data ripe for further attacks? To get a better read on how businesses today are approaching the latest trends, Check Point teamed up with Crowd Research Partners to survey 1,900 IT professionals in US- based companies with 1,000 or more employees. This report explores current cyber security trends, organizations’ investment priorities, and solution choices for cloud security, threat management, mobile security and more.

INTRODUCTION

HOW CONFIDENT ARE YOU IN YOUR ORGANIZATION’S OVERALL SECURITY POSTURE?

Slightly more than one-third (35%) of the respondents either feel Extremely Confident or Very Confident with their organization’s security posture. More interestingly that means nearly 65% are not confident. Many organizations remain vulnerable to security breaches because they feel security is too complicated, they don’t have the resources to manage security, there are too many unknowns, or they simply don’t understand the ramifications of utilizing preventative security measures.

Addressing your organization’s security posture means investing in the right technology, processes and procedures as well as taking the right approach. Unfortunately, many organizations simply take the wrong security approach. Utilizing multiple systems with separate management controls is costly and ineffective. A better approach to help organizations propel their business forward is where you have a single consolidated system where all threats are identified and all threats are blocked, keeping attacks outside of your network.

Extremely confident

Very confident

Slightly confident

Not at all confident

7% 3%

11%

28%

50% Moderately confident

NoneBPaaS Not sure/Other

72% CLOUD SERVICE

DELIVERY MODELS SaaS

57% IaaS

49% PaaS

11% 6% 2%

The need to run processes more efficiently, improve time-to-market and enhance user experience is driving more and more enterprises to embrace the cloud as part of their IT strategy. It is interesting to note that “Cloud” still has many different meanings; IaaS, SaaS, PaaS and so on. Equally interesting is the fact that enterprises today deploy a variety of cloud delivery models to streamline processes and increase agility.

IT teams usually have good visibility into and control over their on-premise networks. But when it comes to cloud environments, it’s not as easy to see and react to threats. Regardless of how your organization defines “Cloud”, it’s important to make sure your security can adapt to your organizations’ cloud strategies.

WHAT CLOUD SERVICE DELIVERY MODEL(S) IS YOUR ORGANIZATION CURRENTLY USING?Q2

CLOUD BENEFITS

IMPROVED AVAILABILITY AND BUSINESS CONTINUITY

41%

COST REDUCTION

37%

FLEXIBLE SCALABILITY

49%

INCREASED AGILITY 37%

Accelerated deployment and

provisioning

Accelerated time to market

Moved expenses from fixed CAPEX (purchase)

to variable OPEX (rental/subscription)

Improved security

25% 22% 21%31%

Enterprise IT is rapidly evolving from a hardware-centric to an application-centric model. This enables greater business agility to streamline processes and realize significant CAPEX savings. However, when we look closely at the benefits cited for the cloud, these are in direct contrast with how we implement network security. The changeover to cloud computing makes this a good time to rethink the security strategy needed to protect your organization’s cloud assets and services as well as what this means for your role as an IT professional.

WHAT OVERALL BENEFITS HAVE YOU REALIZED FROM YOUR CLOUD DEPLOYMENT?

VERY CONCERNED 31%

18%

MODERATELY CONCERNED 32%

SLIGHTLY CONCERNED

81% ORGANIZATIONS HAVE SECURITY

CONCERNS 13%

NOT AT ALL CONCERNED6%

EXTREMELY CONCERNED

While process efficiencies and network agility are key cloud drivers, enterprises of all sizes continually cite cloud security as their top concern. Despite this, cloud adoption continues to rise. Assets and data in the cloud are vulnerable to the same threats targeting our on-premise networks, and thus require the same level of protections. With networks now spanning multiple providers, a comprehensive cloud security strategy must include consistent protections across all platforms with consolidated visibility and reporting to quickly respond to threats and easily comply with regulatory demands.

PLEASE RATE YOUR LEVEL OF OVERALL SECURITY CONCERN RELATED TO ADOPTING PUBLIC CLOUD COMPUTING

Legal & regulatory compliance

Loss of control

Management complexity

27% 25% 19%

Fear of vendor lock-in

16%

General Security Risks

Lack of staff resources or expertise

34%

32% Integration with existing IT environment 29% Data loss & leakage risks 29%

Cloud adoption certainly provides many benefits, but enterprise security needs to adapt to this new environment. The end goal of a cloud security strategy must be to permit businesses to realize the full benefits of the cloud without letting security slow them down. Deploying an advanced threat prevention solution that seamlessly works across any cloud platform and supports native automation and orchestration capabilities will address these concerns while allowing enterprises to embrace the cloud with confidence.

WHAT ARE THE BIGGEST BARRIERS HOLDING BACK CLOUD ADOPTION IN YOUR ORGANIZATION?

Security concerns associated with moving data beyond IT control keeps many organizations from fully embracing the cloud. Enterprises want the ability to control their own data and keep it private all while maintaining compliance with regulatory mandates. The loss of visibility and manageability across all traffic and environments means internal breaches can go undetected and move unimpeded throughout your cloud. The same security protections safeguarding on-premise networks, data and workflows must also be part of a comprehensive enterprise cloud security strategy.

Lack of integration with on-prem

security technologies

No automatic discovery / visibility / control to

infrastructure security

Can’t identify misconfiguration

quickly

Complex cloud to cloud / cloud to on-prem

security rule matching

30% 28% 26%34%

38% SETTING CONSISTENT

SECURITY POLICIES

34% REPORTING

SECURITY THREATS

43% VISIBILITY INTO

INFRASTRUCTURE SECURITY

COMPLIANCE

36%

Q6 WHAT ARE YOUR BIGGEST CLOUD SECURITY HEADACHES?

76% DATA ENCRYPTION

69% NETWORK

ENCRYPTION

55% ACCESS CONTROL

Trained cloud security

professionals

Intrusion detection & prevention

Firewalls / NAC

Patch management

42% 41% 35%47%

There are a number of technologies enterprises utilize for protecting their data in the cloud, chief among them is data encryption. However, encryption itself isn’t a fail-safe solution. Organizations should employ comprehensive protections to ensure their data is safeguarded in the cloud from even the most sophisticated threats.

WHAT SECURITY TECHNOLOGIES AND CONTROLS ARE MOST EFFECTIVE TO PROTECT DATA IN THE CLOUD?

Keeping mobile devices safe from cyberattacks often requires a layered approach that fits into your existing security strategy and infrastructure. Doing so helps make sure you stay abreast of the threats you’re facing in real-time so you are better prepared to stop attacks before they seize control of your data.

Data loss or leakage occurred

Unauthorized access to corporate data

and systems

Disrupted business activities

The company had to pay

regulatory fines

10% 8% 1%12%

16% INCREASED HELPDESK WORKLOAD

REDUCED EMPLOYEE

PRODUCTIVITY

31% 24% ADDITIONAL IT RESOURCES

NEEDED TO MANAGE MOBILE SECURITY

13% MALWARE

INFECTIONS AND RELATED COST

WHAT IS YOUR BIGGEST PAIN POINT WHEN IT COMES TO MOBILE SECURITY?Q8

Allowing your employees to use their own devices for work purposes introduces security risks. Mobile devices, when combined with personal applications, also present additional challenges over securing and managing these devices that is far more complex than corporate PCs and laptops.

Malware

Device management 40% | Network attacks via Wi-Fi 33% | Compliance with regulations 30% | None 4% | Other 3%

Vulnerability exploits

Inability to control endpoint security

Ensuring security software is up-to-date

50% 47% 40%57%

DATA LEAKAGE/LOSS 65%

56%59% UNAUTHORIZED ACCESS

TO COMPANY DATA AND SYSTEMS

USERS DOWNLOAD UNSAFE APPS OR CONTENT

DOWNLOAD

61% LOST OR STOLEN DEVICES

WHAT ARE YOUR MAIN SECURITY CONCERNS RELATED TO BYOD?Q9

WHAT ACTUAL NEGATIVE IMPACT DID MOBILE THREATS HAVE ON YOUR COMPANY IN THE PAST 12 MONTHS?

Attacking mobile devices is now the best way to penetrate an organization’s network. Still, some organizations are either unaware or unconcerned that these attacks pose a real risk. With the sophistication and number of attacks on the rise, the impact to your business can be significant.

Disrupted business activities 11% | Unauthorized access to corporate data and systems 10% The company had to pay regulatory fines 2% | Other 1%

Data loss or leakage occurred

Reduced employee productivity

12%

Malware infections and related cost

12%

25%

23%

ADDITIONAL IT RESOURCES NEEDED TO MANAGE MOBILE SECURITY

INCREASED HELPDESK WORKLOAD

Q10

Whether organizations care to admit it or not, cyberattacks on mobile devices are happening right now. Some of these attacks we know about, but many we don’t. Just because you think you haven’t been attacked doesn’t mean you haven’t – it just means you don’t have visibility into your enterprise mobile security posture.

28% 14%

58%

NOT SURE / CAN’T DISCLOSE

YES

11001010110010101

11001010110010101 11001010110010101

010PASSWORD10

HAVE MOBILE DEVICES BEEN INVOLVED IN SECURITY BREACHES IN YOUR ORGANIZATION IN THE PAST?

Q11

PCs and laptops are different animals than smartphones and tablets. So it’s no surprise that keeping these devices safe requires a different approach than traditional network security often provides.

Cross-platform support 44% | App Risk Detection 41% | Other 4%

Vulnerability exploit defense

52%

Device configuration

50%

Role-based access control

45%

Integration with other Endpoint

Management System

45%

68% MALWARE PROTECTION

64% LOGGING, MONITORING

AND REPORTING

58% EASE OF DEPLOYMENT

54% NETWORK / WI-FI ATTACK DEFENSE

LOG

IN YOUR OPINION, WHAT KEY CAPABILITIES ARE REQUIRED FOR MOBILE THREAT DEFENSE SOLUTIONS?

Q12

Worldwide Headquarters

5 Ha’Solelim Street, Tel Aviv 67897, Israel | Tel: 972-3-753-4555 | Fax: 972-3-624-1100 Email: info@checkpoint.com

U.S. Headquarters

959 Skyway Road, Suite 300, San Carlos, CA 94070 | Tel: 800-429-4391; 650-628-2000 | Fax: 650-654-4233

checkpoint.com

With IoT, mobile, and cloud reliance, we gain great benefits but also are more at risk. Yet, many businesses don’t understand the danger and want

to simply upgrade what’s already in place.

The sophistication of modern malware and tactics used by hackers means we are all vulnerable. It’s time to take a different view and build the security

architecture of a future that is already underway.

Check Point provides an architecture and solution set that addresses the full spectrum of threats from on-premises to mobile to cloud. This comprehensive approach is designed to help you secure any environment you operate in—while

keeping attacks outside your networks.

For more information, download the Check Point 2016 Security Report

http://pages.checkpoint.com/security-report.html https://www.checkpoint.com

Report | Cyber Security, 2017

Item Type: pdf