Skip to content

Elevated cyberattack worries resurface, causing concern among Chief Information Security Officers

Cyber tranquility has eroded as concerns about economic instability and internal hazards escalate, according to a Proofpoint report.

Cybersecurity leaders express growing worry as potential cyber-attacks loom larger in significance
Cybersecurity leaders express growing worry as potential cyber-attacks loom larger in significance

Elevated cyberattack worries resurface, causing concern among Chief Information Security Officers

In a recent survey, the 2023 Voice of the CISO report, based on responses from 1,600 CISOs across 16 countries, reveals a growing sense of unease among cybersecurity leaders as the world readjusts to a post-pandemic reality.

Lucia Milică Stacy, global resident CISO at Proofpoint, noted that the return to normal operations has started to erode some of the optimism among CISOs. The report does not offer any new insights into these post-pandemic concerns, but it does highlight several key areas of concern.

One of the most significant findings is that more than 60% of CISOs currently face unreasonable job expectations, an increase from 49% a year ago. This figure underscores the growing pressure on cybersecurity leaders to protect their organisations from an increasingly complex and evolving threat landscape.

Another concerning trend is the belief among CISOs that their organisations are unprepared to cope with a targeted attack. According to the report, 3 in 5 CISOs believe their organisations are unprepared, compared with just 50% a year ago. This statistic suggests a growing awareness of the potential risks and a need for improved cybersecurity measures.

The report also indicates that 68% of CISOs feel their organisations are at risk of a material cyberattack, an increase from 48% a year ago. This heightened sense of risk is particularly notable in light of the SolarWinds incident and the surge in ransomware attacks, although the report does not provide any new statistics regarding the percentage of CISOs who believe their organisations have overcome these anxieties.

The sense of calm among CISOs, prompted by the belief that they had overcome the anxiety of supply chain attacks, is starting to wear off. This shift in sentiment could be due to the return to corporate offices or the adoption of hybrid work environments, which introduce new vulnerabilities and complexities.

The report also explores the issue of personal liability, with 62% of CISOs expressing concern about potential personal liability as more emphasis has been placed on incident response and governance. This concern underscores the high stakes associated with cybersecurity leadership and the need for robust support structures.

One area where the report does offer new insights is the link between data loss events and employees leaving the organisation. According to the report, about 4 in 5 CISOs surveyed believe data loss events are linked to employees leaving, a statistic that underscores the importance of effective employee exit strategies.

The report also confirms that the job of a CISO is getting harder, with three in five CISOs having experienced burnout over the past 12 months. The names of the three CISOs who experienced burnout are not explicitly mentioned in the Proofpoint report.

In conclusion, the 2023 Voice of the CISO report provides a sobering snapshot of the challenges facing cybersecurity leaders in the post-pandemic world. As companies readjust with workers returning to corporate offices or working in hybrid environments, CISOs are grappling with increased job expectations, heightened risks, and personal liability concerns. The report serves as a call to action for organisations to invest in their cybersecurity infrastructure and support their CISOs in navigating these complex challenges.

Read also:

Latest