Remote work, financial constraints major IT security challenges for companies in 2021: Kaspersky
The shift to working from home and financial constraints, along with a growing cyber threat landscape, will impact the day-to-day role of cybersecurity professionals in 2021, according to Kaspersky.
“Understanding the challenges but also perceiving the opportunities in IT and IT security management is critical for businesses to maintain their protection,” the cybersecurity firm said.
Kaspersky, in its recent report,
Filling the Gaps: Enterprise IT Security Predictions 2021, provided a range of IT security recommendations for businesses in 2021, with advice for every cybersecurity-related role, including CEOs or business owners, CISOs, SOC team leaders and IT managers .
Investments in cybersecurity are expected to increase by 10% in 2021
According to the report, businesses will also need to assess and monitor their home security moving forward. In-home assessment and certification will be required.
“There should be tools to analyze the level of security in a workplace – from the presence of software vulnerabilities to connecting to an untrusted or unprotected Wi-Fi hotspot. This will also require wider adoption VPN, privileged access management, multi-factor authentication systems, implementing stricter monitoring and updating existing contingency and contingency plans,” he said.
In order to manage financial constraints, organizations may need to transition to a service model that can deliver needed IT and IT security services with less investment.
Cyber Security: 64,000 jobs on offer
According to Kaspersky’s survey, 79% of businesses in the Asia-Pacific region said they plan to use a Managed Service Provider (MSP) or Managed Security Service Provider (MSSP) in the next 12 month.
“It’s for good reason because the service model helps minimize capital investment and move trading costs from CapEx to OpEx,” Kaspersky said.
In addition, in the future, companies should integrate management skills into the training of internal IT security specialists.
“Cybersecurity professions are divided into very narrow specializations, which means that hiring personnel for each specific role can be too expensive. This is where outsourcing can help fill the gap. However, companies that outsource key cybersecurity components still need to focus on developing the management skills of their internal teams to manage these outsourced functions,” he said.
The changing cybersecurity landscape and digital business transformation will include an increased reliance on cloud services. This necessitates dedicated management and protection measures.
According to the survey, in 2020, employees of 95% of enterprises and 94% of small and medium-sized enterprises (SMEs) used non-professional software and cloud services such as social networks, messaging or other applications.
“That is unlikely to change when staff return to the office. To ensure that all company data is under control, better visibility into cloud access will be required. IT security managers will need to align with this cloud paradigm and develop skills for managing and protecting the cloud,” Kaspersky said.
Along with the integration of new cybersecurity practices, the quality of cybersecurity tools will be equally important in the future.
“We have seen two significant shifts in what customers expect from enterprise cybersecurity offerings. First of all, the quality of protection is no longer to be discussed, it is now a “must have”. Another major trend is that deep integration between different enterprise security components, ideally from a single vendor, is now playing a greater role. For example, there was a long-held belief in the industry that various specialized solutions from various vendors can help create the best combination of protection. Today, companies are looking for a more unified approach with maximum integration between different security technologies,” said Alexander Moiseev, Chief Commercial Officer of Kaspersky.