Trend Micro evaluation highlights alarmingly low use of attack surface management tools
Trend Micro Incorporated, a global cybersecurity leader, today announced new research* revealing a worrying disconnect between recognition of attack surface risk and use of specialized tools to manage that risk. Trend announced the findings at the RSA Conference in San Francisco.
Read More on CIO Influence: AI-Augmented Risk Scoring in Shared Data Ecosystems
The global study of over 2,000 cybersecurity leaders revealed that 73% have experienced security incidents due to unknown or unmanaged assets. The number of these assets has rapidly increased with the proliferation of generative AI and the increased complexity that comes with it, as well as continued growth the number of IoT devices used in offices and employees’ homes.
As a result, 91% of respondents acknowledged that attack surface management is either directly or somewhat connected to their organization’s business risk. A large share also recognized that failing to manage risk across exposed assets can have significant negative impacts beyond immediate security threats, including:
- Operational continuity (42%)
- Market competitiveness (39%)
- Customer trust/ brand reputation (39%)
- Supplier relationships (39%)
- Employee productivity (38%)
- Financial performance (38%)
However, despite this apparent recognition, just 43% of global organizations use dedicated tools to proactively manage risk across their attack surface, the study revealed. Over half (55%) said they have no processes in place to do so continuously—a must in order to mitigate and contain risk before it can impact operations.
Catch more CIO Insights: Ghost Security Releases Groundbreaking Research: AI-Driven Analysis Exposes Flaws in Static Application Security Testing
On average, only 27% of responding organizations’ budgets are dedicated to managing attack surface risk, with over three-quarters (77%) of companies claiming that their current resources are adequate for addressing these challenges.
Kevin Simzer, COO at Trend: “As far back as 2022, global organizations were worried that their cyber-attack surface was spiraling out of control. The challenge is even more pressing today. Yet while most understand the impact this is having on business risk, few are taking proactive security measures to mitigate that risk continuously. Managing cyber risk exposure should be a top priority for all businesses.”
*Trend Micro commissioned Sapio Research to interview 2250 individuals with responsibility for IT and/or cybersecurity—across multiple verticals, organisation sizes and 21 countries in Europe, North America and APAC.
[To share your insights with us, please write to psen@itechseries.com]
