CIO & LEADER-Issue-06-September_iPad

Security
One change
you will like
to see in your
organization’s
information
security
practice
“Top management attention”
What out of the following activities will take most of your time in
the next 12 months?
Meeting compliance requirements
14%
14%
Creating security policies
12%
12%
Assisting in creating risk strategies for your
organization
9%
11%
Creating a MSSP strategy/selecting MSSP vendors
1%
10%
Learning newer technologies & solutions/Doing
certifications in new tech
7%
10%
Choose security solutions
7%
9%
Analyzing information
8%
8%
2017
Formulating risk strategies for your organization
7%
8%
2016
Learning about risk management/Doing
certification in new security standards.
4%
7%
Mobilizing top managers to understand the
importance of information security
5%
14%
Fighting shadow IT
5%
6%
Implementing already decided security solutions
4%
11%
Share of Total Responses (2017) vs Share of Total Responses (2016)
While meeting compliance requirements is not seen as a major challenge, CISOs say it will still
take a lot of their time. In short, something that calls for greater automation.
One change
you will like
to see in your
organization’s
information
security
practice
“Quick adaptability to changes
in risk landscape”
38 CIO&LEADER | September 2017