The issues that Chief Information Security Officers (CISOs) encounter are changing dramatically in the ever-changing cybersecurity world. Stott & May’s Cyber Security in Focus report for 2023 offers a comprehensive look at the trends impacting CISOs, shining a light on the industry’s most urgent concerns. Notably, this year’s survey reveals a significant strategic shift, with 55% of CISOs now identifying cybersecurity as their top priority, a break from previous worries.
One of the report’s significant findings is the increasing significance of budget restrictions as the principal barrier to implementing cybersecurity roadmaps. Over the last year, there has been a significant 16% year-on-year rise in CISOs citing financial constraints as their top challenge. This move is representative of a wider industry trend in which economic concerns force security officials to accomplish more with fewer resources.
The scarcity of internal capabilities is a continuous concern for CISOs, as emphasised by 34% of survey respondents. A startling 66% of security leaders say sourcing personnel is a significant challenge, emphasising the continued difficulty of locating and keeping skilled individuals in the area. Organisations are wrestling with the requirement to bolster their defences against an increasingly complex threat landscape as demand for cybersecurity knowledge continues to exceed supply.
The roadblocks to effective plan implementation are numerous, ranging from internal talent gaps to gaining leadership backing and building a security-centric culture. What sticks out in the present scenario, however, is the rising effect of economic issues, which forces CISOs to manage their cybersecurity projects with limited finances.
According to this year’s Cyber Security in Focus poll, money restrictions have eclipsed internal capabilities as the top impediment to plan implementation, with 51% of security leaders citing budgetary constraints as their primary impediment. Internal skills, while still a major issue for 34% of CISOs, have taken a second seat to the acute financial difficulties that organisations worldwide confront. Board-level buy-in (11%) and technology (3%) are also mentioned as hurdles by the CISOs polled.
The cybersecurity talent shortage is a chronic issue, with 66% of security leaders failing to fill open jobs inside their organisations. Alarmingly, approximately 69% of security openings remain vacant even after an 8-week period, highlighting the severity of the skills shortage.
The rising expectation of wage levels in the cybersecurity arena is exacerbating the personnel scarcity. A significant 47% of CISOs say that salaries have climbed by more than 11% year on year, while another 31% estimated salary inflation is between 6 and 10%. The competitive market for cybersecurity specialists is heating up, causing organisations to rethink their remuneration structures in order to recruit and retain top personnel.
Strategic cybersecurity investment remains a priority but with limited flexibility for innovation. A significant 44% of CISOs report that their budgets will either remain the same or decrease, emphasising the importance of resource allocation. Only 53% feel security expenditure is keeping up with digital business expectations, indicating a possible divergence between security goals and organisational strategy.
In terms of investment priorities, CISOs are focusing on cloud security (25%), identity and access management (IAM) (20%), and security and vulnerability management (18%). These goals demonstrate a thorough understanding of the changing threat landscape and the need to strengthen defences in key areas.
A notable shift in viewpoint may be seen as CISOs try to link cybersecurity with larger business initiatives. Moreover, 60% of respondents believe that the security function improves the total value proposition to clients. This change highlights the evolution of cybersecurity from a technical requirement to a strategic imperative that directly contributes to corporate objectives.
The Cyber Security in Focus study is a yearly in-depth investigation that draws insights from a high-quality sample of 60 CISOs and security professionals. The report, which was sourced from Stott and May’s professional network across EMEA and North America, combines quantitative research with qualitative interviews with key industry professionals.
In the fast-expanding realm of cybersecurity, Haris Pylarinos, Founder & CEO of Hack The Box, emphasises the need to be outward-looking and ensure internal capabilities remain current. Crossbeam’s CISO, Chris Castaldo, underlines the need to know the company as a critical barrier to successful cybersecurity roadmap implementation.
Ultimately, the 2023 Cyber Security in Focus study presents a complete picture of the problems and possibilities that CISOs face. The industry’s transformation, driven by fiscal limitations, personnel shortages, and the requirement to connect security measures with larger business plans, has resulted in a strategy shift towards cybersecurity as a primary priority. As CISOs face these issues, intelligent decision-making and creative solutions will be essential in navigating the complicated and evolving cybersecurity landscape.
