security priorities infographic

1. For more insight, download the executive summary.
To stay up to date on all of IDG’s finding important for
tech marketers, visit www.idg.com/tools-for-marketers/research.
Source: 2021 IDG Security Priorities Study
Asnapshotofhow
IT security leadersare
prioritizingprojectsand
planninginvestments
inthenext 12 months
Security Priorities
ALookAhead
21%
of security roles
report into the
Board of Directors
Upfrom12%
in2020
Physical security has been added
to the list of responsibilities
among IT security leaders:
Addedinthe
past 3 years
Expecttoaddinthe
next 12 months
No, and do not
expectitto
65% 11% 24%
67%
of companies have
a CISO, CSO, or
Top Security Executive
Upfrom61%
in2020
SMB
50%
Enterprise
84%
SecurityLeadersExecutingTheseProjects
Best practices
(49%)
Compliance/
regulations or
mandates (49%)
Evolving risks
posed by changing
workforce or
business
dynamics (41%)
Addressing
risks that result
from digital
transformation
(38%)
Responding to a
security incident/
breach (35%)
TopFactors
Determining
Security
Spending
Shift
inSecurity
Budgets
Increase
44%
Remain
thesame
54%
Decrease
2%
$123M
ENTERPRISE
$11M
SMB
AverageAnnual
SecurityBudget
UpcomingBudgetPlanstoCombatRisks
ThisYear’s
TopSecurity
Priorities
#1 #2 #3 #4 #5
Be appropriately
prepared to
respond to a
security incident
Improve the
protection of
confidential and
sensitive data
Improve security
awareness among
end users though
training
Upgrade IT and
data security to
boost corporate
resiliency
Reduce
complexity in
IT security
infrastructure
of organizations say
they have added at
least one security tool
in the past 12 months
90% ZeroTrusttechnologies(38%)
SOAR(SecurityOrchestration,AutomationandResponse)(37%)
SASE(SecureAccessServiceEdge)(35%)
Deceptiontechnology(35%)
XDR(ExtendedDetectionandResponse)(34%)
SecurityToolsontheRadarforOrganizations
46%havethesetoolsinuse,upfrom24%in2019
HowareOrganizationsPreppingtoPreventCyberattacks?
of organizations are aware
of what caused their security
incidents in the past year
91%
Enterprise
94%
SMB
89%
Upfrom87%
in2020
38%
rated thevulnerabilities
intheirOT environmentas
agraveorsignificantrisk
Enterprise–21%
SMB–47%
Employeesfallingvictimtophishingattacks
&othernon-malicioususererrors
Unpatchedsoftware
vulnerabilities
Securityvulnerabilitiesat3rdparty
organizationsorindividuals
Misconfigurationofservicesorsystemson
oroffpremises
Unexpectedbusinessriskswhichexposed
avulnerability(pandemic-related,workforce
changes,etc.)
TopCauses
ofSecurityIncidents
#1
#2
#3
#4
#5
average time
passed before
a security event
was detected
5WEEKS
CurrentSecurityIncidents&Vulnerabilities