Report by Trellix
Mind of the CISO: Closing the gap between reaction and readiness
Key Findings
85% of CISOs say their organization's cybersecurity budget is influenced by the volume of nation-state threats.
A majority (89%) of CISOs are frequently asked about nation-state threats by their CEO and/or the board.
Over half (60%) of organizations have yet to fully integrate threat intelligence into their wider cybersecurity strategy.
Nearly all CISOs (98%) face barriers when acting on threat intelligence.
82% of CISOs report their organization's approach to threat intelligence collecting requires significant improvement or complete overhaul.
28% of CISOs report limited automation makes it difficult to integrate tools into their threat intelligence programs.
When asked about the top challenges when acting on threat intelligence, 45% of CISOs said keeping pace with evolving threats.
When asked about the top challenges when acting on threat intelligence, 39% of CISOs said integration issues.
Global threat detection volume from APT (Advanced Persistent Threat) actors rose 45% at the beginning of this year.
87% of CISOs say their organization's cybersecurity strategy is influenced by the volume of nation-state threats.
Nearly all CISOs agree threat intelligence is essential for identifying and mitigating emerging cybersecurity threats (94%).
The majority of CISOs (95%) agree being part of a threat intelligence sharing community or network improves their ability to prepare for threats.
When asked about the top challenges when acting on threat intelligence, 38% of CISOs said regulatory constraints.
79% of CISOs report their organization's approach to threat intelligence incorporating requires significant improvement or complete overhaul.
80% of CISOs report their organization's approach to threat intelligence monitoring requires significant improvement or complete overhaul.
78% of CISOs report their organization's approach to threat intelligence analyzing requires significant improvement or complete overhaul.
One-third of CISOs (33%) agree AI-driven analytics would help them perform their responsibilities more effectively.
Organizations with a proactive approach to threat intelligence (44%) are considerably more likely to use advanced threat detection technologies over the next 12 months, compared to those with a reactive approach (56%).
37% of CISOs agree increased levels of automation would help them perform their responsibilities more effectively.
89% agree a CISO community would enable security leaders to navigate high-stakes decisions through trusted insights and shared experiences
When asked about the top challenges when acting on threat intelligence, 45% of CISOs said keeping pace with evolving threats.
82% of CISOs report their organization's approach to threat intelligence collecting requires significant improvement or complete overhaul.
78% of CISOs report their organization's approach to threat intelligence analyzing requires significant improvement or complete overhaul.
79% of CISOs report their organization's approach to threat intelligence incorporating requires significant improvement or complete overhaul.
80% of CISOs report their organization's approach to threat intelligence monitoring requires significant improvement or complete overhaul.