Security is changing, organizations are unprepared

F5 Networks announced the findings of its 2013 RSA Security Trends Survey, which revealed that organizations are struggling to keep pace with the changing face of security. Respondents were RSA attendees with IT responsibilities over planning, management, oversight, or implementation of security.

The results show that security trends such as virtualization (73%), BYOD (66%) and the complexity of attack types (72%) have the greatest impact on securing today’s organizations. Nearly half of respondents admit that traditional safeguards are less than adequate in protecting against threats related to these trends, with roughly one-third of respondents reporting that their security readiness is inadequate.

When asked what security trends have the greatest impact on an organization’s ability to achieve the level of security it desires, respondents answered:

• Virtualization (73%)
• The increasing complexity of threats (ex: Distributed Denial of Service attacks) (72%)
• BYOD (use of employee-owned devices such as smartphones for business use) (66%)
• The change in the bad guys (from hackers to espionage and political motivation) (62%)
• The shift from data center focused infrastructure to cloud-based infrastructure (61%)
• The shift from traditional client-server applications to web-based applications (60%)

BYOD is seen as critical in an organization’s ability to achieve the level of security it desires, yet a sizeable number of organizations are not taking the appropriate steps to address it.

• Most (75%) see BYOD as being prevalent in their organization.
• Furthermore, two-thirds (66%) see BYOD as having a somewhat to extremely high impact on security.
• Despite this, one-third (35%) say they are not prepared to provide adequate security to protect against threats associated with BYOD.

Organizations are unprepared to properly address the shift to web-based applications and cloud-based infrastructure.

• Nearly two-thirds (64%) of respondents see the shift to web-based applications as a trend affecting security, yet 37% of respondents’ organizations are not providing adequate security to protect against potential threats.
• Sixty-six percent of respondents see the shift to cloud-based infrastructure as a trend affecting security, yet 49% of respondents’ organizations are not providing adequate security to protect against potential threats.

There is a wide range of IT trends making security more complex. Below are the percentages of respondents who felt traditional safeguards were less than adequate in protecting against threats related to a variety of current IT trends:

• The shift from traditional client-server applications to web-based applications (44%)
• The shift from data center focused infrastructure to cloud-based infrastructure (49%)
• BYOD (use of employee-owned devices such as smartphones for business use) (45%)
• Increased external threats (spam and malware) (39%)
• The increasing complexity of threats (ex: Distributed Denial of Service attacks) (48%)
• The change in the bad guys (from hackers to espionage and political motivation) (47%)
• Increasing insider threats (49%)

“The security landscape continues to change rapidly and many organizations are struggling to properly address evolving threats,” said Mark Vondemkamp, VP of Product Management for Security at F5. “Companies will do well to proactively address trends like BYOD and cloud security, but they should also look to raise their game in terms of threat detection and mitigation. With employee behavior, business priorities, and infrastructure demands further expanding traditional threat vectors, the proper tools and procedures are essential in maintaining a healthy level of security.”