Almost half of the world's large companies have a dedicated IT security team in their IT department. Cybersecurity is managed by a separate department in half (52 percent) of all large companies, while only 20 percent have an internal Security Operation Center (SOC), which is responsible for the continuous monitoring and response to security incidents.
A current Kaspersky study shows what the typical IT security department looks like today: An improvement in the specialist knowledge of internal specialists is cited as the second most common reason for increasing the IT security budget in the coming years.
Only 20 percent of companies have a SOC
Companies of all sizes and especially corporations need qualified specialists to protect themselves from constantly evolving cyber attacks. The consolidation of IT and security positions in a single department can be a suitable solution for accelerating many processes. However, this approach also contradicts the principle of segregation of duties, as the same people would be responsible for both day-to-day IT initiatives and for assessing the corresponding security risks.
16 percent have a threat intelligence team
For its latest report, Kaspersky asked companies whether they employ highly specialized units within a cybersecurity department. 16 percent stated - in addition to security operation centers - that they have dedicated threat intelligence teams, 14 percent also employ a specialized malware analysis team.
Although the proportion of such units appears to be quite small, the majority of companies that do not have such technical capacities are willing to invest in training their IT security team in order to close this internal gap. In general, 71 percent of all companies expect their investments in IT to increase in the next three years, 41 percent hope that this will improve the specialist knowledge of internal specialists - the second most common reason for increasing the IT security budget.
Diversified framework offer
In order to do justice to different organizational forms and corporate strategies, Kaspersky has divided its B2B offerings into frameworks that are based on the customer's individual IT security maturity level - Kaspersky Security Foundations, Kaspersky Optimum Security and Kaspersky Expert Security. Kaspersky Managed Detection and Response supports every framework and enables immediate IT security functionality, while a trained IT security team can concentrate on the most important incidents.
The Kaspersky Optimum Security Framework increases protection against known and unknown as well as complex threats and helps medium-sized and small companies with limited cybersecurity resources to set up an incident response. The Kaspersky Expert Security Framework represents a holistic strategy that helps to equip, inform and guide in-house experts with the latest skills in order to deal with the entire spectrum of today's complex threats - APT-like and targeted attacks.
Cybersecurity departments need individual help
"The survey results show that cybersecurity departments can be organized very differently in companies," emphasizes Sergey Martsynkyan, Head of B2B Product Marketing at Kaspersky. “This means that their needs and requirements are also individual. With our framework approach, we not only help customers to protect themselves against cyber attacks based on their current capabilities and regardless of the size of the company, but also show how they can further strengthen their internal security expertise in the future.”
Go to the study at Kaspersky.com
About Kaspersky Kaspersky is an international cybersecurity company founded in 1997. Kaspersky's in-depth threat intelligence and security expertise serve as the basis for innovative security solutions and services to protect companies, critical infrastructures, governments and private users worldwide. The company's comprehensive security portfolio includes leading endpoint protection as well as a range of specialized security solutions and services to defend against complex and evolving cyber threats. Kaspersky technologies protect over 400 million users and 250.000 corporate customers. More information about Kaspersky can be found at www.kaspersky.com/