CompTIA: Are Companies Really 'Prioritizing' Cybersecurity?

A new study shows that while more and more companies are making cybersecurity a priority, many of their IT departments lack the skills and resources needed to do so.

A new CompTIA survey of security professionals shows a rising but largely unmet demand for security. Nine out of 10 respondents said their companies value security more than they did in 2014, but less than half (47 percent) said their current security was acceptable.

“Simply placing a higher priority on security may not lead to improved measures,” said Seth Robinson, CompTIA’s senior director of technology analysis. “Companies may not fully understand the nature of modern threats. It’s incumbent on the IT pros to adequately communicate the requirements for modern security; the potential cost of weak defenses; and the specific actions that should be taken.”

This awareness of security needs comes as many companies are turning to mobility and cloud computing, Robinson said.

“This suggests that many companies are embracing new technology solutions without taking the corresponding actions necessary to build a proper defense,” he said. “This poses huge challenges for the IT security professionals tasked with security responsibilities.”{ad}

For the IT professionals who said their existing security is insufficient, having metrics and a budget are both common problems. The study also touched upon a skills gap that exists in cybersecurity. It found that two-thirds of the companies are giving their employees security training while others want their technology staff to attain more certifications.

“The use of technology has outpaced cybersecurity literacy, so there’s also a growing need for the overall workforce to improve their knowledge and awareness of security issues,” Robinson said.

The online survey took answers from 500 domestic IT professionals.