When making the case for cybersecurity funding, 76 percent of respondents said that showing the cost of a data breach in lost sales and lost productivity was an effective method. Making those upfront investments can save organizations a lot of heartache when a threat escalates to an attack.
“The more holistic your view of the enterprise as a whole — not only the specific cyber risk itself but also the business impacts that are associated with it — typically, the more successful you're going to be in your cyber resilience aims,” says Buck Bell, who leads CDW's Global Security Strategy Office. “From my perspective, cyber risk is business risk.”
But even as cyberthreats grow with sophistication, organizations have matured their cybersecurity strategies. Some 50 percent of respondents said they were somewhat confident that they had sufficient visibility into their security, which is a necessary initial step to establishing a robust security posture. And 49 percent of respondents felt somewhat prepared to respond to a security incident.
Still, a well-staffed and resourced security team remains a major concern for leaders.
“This is a stressful industry, there's just no two ways about that,” says Bell. “Things like job rotation can help — putting people into roles to let them gain additional experience. Obviously, putting together some kind of training strategy for people can help them secure and develop their own careers. I think that's a huge value-add for companies looking to retain staff.”
