Security News Most organizations don't have an IT security expert

[JM Safe]

With cyber attacks on the rise, organizations are facing pressure to beef up their security to avoid falling victim to such an attack. However, a recent IT security report from Spiceworks shows that 80 percent of organizations were affected by at least one security incident during 2015.

To compile its report, the company surveyed over 600 IT professionals from the US and UK. Shockingly, Spiceworks discovered that few organizations have either an in-house or third-party cyber security expert on call.


According to the survey only 29 percent of organizations have such an expert working in their IT department and 23 percent contract outside experts to handle security situations. However, 55 percent of the organizations surveyed said that they do not have regular access to in-house or third-party IT security experts.

Spiceworks also found that the number of IT professionals with security certifications is quite low. The company polled over 1,000 IT pros in regard to their cyber security credentials and 67 percent admitted to not having any security certification at all. Seventeen percent however do have the basic CompTIA Security+ certificate which many believe is essential for job interviews and is not paid for by their organization.

The report made it clear that cyber security is a business priority and should be for modern businesses. However, according to the IT pros surveyed, 73 percent say it is a priority for the CIO and senior IT leaders and over half say that it is up to the CTO and CEO to prioritize security.

Despite the rise of cyber attacks, few organizations see investing in IT training as something worthwhile; only 18 percent of employers are very open to pursue and encourage their employees to receive more training.

If organizations expect to flourish in today’s world, then closing the cyber security skills gap is a must and more importance needs to be placed on IT security training and more funds need to be allocated for it as well.

Published under license from ITProPortal.com, a Net Communities Ltd Publication. All rights reserved.

Thanks for reading!

 

[jamescv7]

One of the possible factor, where some regions does not have curriculum for course related of I.T security however organization like CompTia is a good way to be certified so some good groups provide crash course.

Here in Philippines, a two year I.T security is offered to provide basic knowledge at all.

However another factor is where some student does not focus much on security aspect but rather more on programming stuff.

 

[hjlbx]

It mostly comes down to a matter of money; most companies - small & medium - don't want to spend any more on IT than needed to get things working.

 

[simbelmayne]

It's not really necessary to have an expert. If your company isn't really big, and it won't be a target of a massive hacker attack, the only thing you need to worry about is your employee's stupidity. And it can be easily managed with the system of penalties and the detailed instructions.

 

[JM Safe]

It's not really necessary to have an expert. If your company isn't really big, and it won't be a target of a massive hacker attack, the only thing you need to worry about is your employee's stupidity. And it can be easily managed with the system of penalties and the detailed instructions.

Be careful, because in an organization the security is one of the main things. So an expert, for me, it is always needed.

 

[simbelmayne]

Be careful, because in an organization the security is one of the main things. So an expert, for me, it is always needed.

Maybe, I was not stecific. I said, that expert (in the way that I understand it, the really skilled IT-security specialist) is not always needed. The strict instructions, and the "anykey" boy that will watch over all can fix or prevent 90% of issues.