Cyber ​​Security: Top 3 “non-technical” cyber security trends for 2023

Cybersecurity is not just about technology. Non-technical aspects, such as managing people, processes and technology, are key to improving the level of security and reducing cyber risk and mitigating cyber security problems. Unfortunately, this is often overlooked. 

Trends for cybersecurity issues for the coming year:

the management of security tools will be fundamental

Secondo will come, the average company wastes about $135.000 a year on SaaS tools that they don't really need or use. And a 2020 Gartner survey found that 80% of respondents do not use between 1 and 49% of their SaaS subscriptions.

Shelfware occurs for a myriad of reasons, including integration issues, failed communication between departments, poor vendor support, or CISO role change.

Whatever the cause, CISOs need to pay close attention to shelfware management in 2023 as economic factors will lead to cuts. Freeing up your budget from unused SaaS subscriptions.

Consider the following three steps:

1. Quality over quantity: Instead of launching products that target problems as they arise, stop and think about the bigger picture. Once you've identified the scope and extent of your security challenge, perform a thorough technology assessment to ensure the solution meets your needs today and tomorrow.
2. Include key stakeholders in the buying process: From security professionals to developers, be sure to gather user and business requirements before purchasing to get the most out of your investment. This will ensure that business needs are met, leading to greater and faster adoption.
3. Make an adoption plan: Some cash-hungry vendors will disappear after you sign the dotted line, leaving you to figure out how to distribute and use their product. Ask the vendor what training, onboarding, and ongoing support is included before you buy anything. Skills shortages are a constant problem; ease of adoption and use is important for teams with limited resources.

the shortage of cybersecurity skills will continue to cause tension

While the shortage of skills in the field of computer security is starting to level off, companies are still struggling with high turnover rates. An ISACA survey reported that 60% of enterprises had difficulty retaining skilled cybersecurity professionals and more than half felt they were somewhat or significantly understaffed.

Finding and keeping good talent on hand is a challenge, and with the purse strings tightening, there is only so much money and perks to offer candidates. To keep IT from being a revolving door, CISOs need to close the gaps in their corporate culture.

Ask yourself: Why would a senior analyst want to work for me beyond a salary? ISACA found that the top three reasons cybersecurity professionals quit their jobs (excluding pay) were: limited opportunities for promotion and development, high levels of job stress, and lack of management support.

CISOs also need to be aware that hiring new staff is a change that requires flexibility. Good hiring can help establish more efficient processes for overcoming current problems. Not only will your organization reap the benefits of increased security, but supporting innovation is a win for team morale and for retaining valuable employees.

distributed information technology will leave CISOs unaware

The days of monolithic IT are behind us. Digital transformation, accelerated cloud adoption, and the rise of the remote workforce have led to an influx of distributed and shadow IT. Unauthorized adjacent IT acquisitions made outside the purview of the CISO or purchasing department, such as shadow cloud/SaaS and shadow OT, are also a growing concern.

Highly distributed enterprises face the (expensive) task of securing distributed systems and data across remote operations, headquarters, clouds, etc.

Simply blocking unauthorized apps and devices won't solve shadow IT problems; employees will find a way around it to get their jobs done, and it's nearly impossible to know exactly what needs to be blocked and allowed.

CISOs need a new approach to shed light on these growing concerns. In addition to implementing the right technology, a strong culture of safety must be established throughout the company. Being attuned to an organization's needs, concerns, demands and habits will help safety managers 'speak the language' of staff better to ensure effective training.

Safety training for managers and executive roles is even more crucial than for the rest of the company. Educate C-suite, business unit leaders and business engineers on how security, data privacy, compliance and risk management apply to IT implementations, so they know when they are overshooting the line and should contact the 'IT.

BlogInnovazione.it