Identifying Red Flags in Cybersecurity Demand Generation

Overlooking breach potentials and ignoring vulnerability growth are significant red flags in cybersecurity demand generation. Budget misconceptions and neglected communication with security teams further exacerbate risks, compromising effective cybersecurity measures.

1. Overlooked Breach Potential

In the current software industry, a big worry is the unrecognized possible security breaches within companies. Some fear the anticipated growth in cybersecurity incidents, forecasted to reach 15.4 million by 2023. The reasons often stem from the age of the systems we have; they are just too easy to break into.

Tip

Regularly updating and assessing systems for potential vulnerabilities can greatly reduce the risk of breaches.

“Over 80% of us are guilty of using weak passwords.”

As someone who is part of the profession, I recognize the need for strong password policies and better integration of multi-factor authentication into our systems.

The training of employees is frequently taken for granted, but phishing attacks remain a prevalent means of achieving data breaches. Regular training sessions are a necessary part of an organization’s life if one wants it to respond in a secure manner to recognized threats, as one knows that not all threats will be recognized. Also posing a significant risk are the third-party vendors employed by an organization; these can be a point of entry for hackers. Organizations need to perform thorough vendor risk assessments to safeguard sensitive data.

Neglecting physical security can have harmful consequences. When sensitive data is stored in a physical location, allowing unauthorized access to that space compromises the data just as much as if a hacker were to breach a firewall. For that reason, controlling access to physical locations is crucial, as is regularly assessing what’s inside those locations for security holes.

Given that breaches cost an average of nearly $4.5 million, being proactive isn’t just advantageous—it’s essential. Companies need to make a top priority of these measures, ensuring that they are robust and well-integrated into the overall system, and that they cover all manner of access points and potential holes. This has to be part of the Security by Design philosophy, which aims to bake security measures into system architecture rather than retrofitting them later.

Challenge	Recommended Action
Unrecognized Breaches	Conduct regular vulnerability assessments.
Weak Password Usage	Implement strong password policies and enforcement.
Phishing Attacks	Schedule frequent employee training and simulations.
Third-Party Vendor Risks	Perform comprehensive vendor risk assessments.
Neglecting Physical Security	Regularly audit physical access controls and locations.

2. Ignoring Vulnerability Growth

The increase in the number of vulnerabilities cannot be disregarded. Doing so could have disastrous effects on organizations, especially those in the software sector. The consequences are already real and must be confronted head-on. We must reach a better understanding of a software vulnerability’s life cycle and chart a course from inception to resolution across the incredibly diverse constellation of the software development community.

Fact

Nearly half of all discovered vulnerabilities are rated as high or critical.

A report from the Skybox Research Lab highlights how nearly half of these vulnerabilities are rated as high or critical. They are appearing so quickly that cybercriminals are moving in to exploit the gaps they find—often faster than the new defenses can be deployed.

“Because there is no clear prioritization or visibility into the large number of new vulnerabilities, it has become at least somewhat unavoidable that a number of these high-risk vulnerabilities will go unchecked for a time, which is giving rise to the number of cyberattacks we are seeing.”

The vulnerability landscape is growing, with more and more vulnerabilities being discovered—most of them by our adversaries—and in this environment, we mustn’t even think of falling behind. Our approach must be a universal one: one that applies both to the tools we use and the resources we have to work with and that also demands a universal, cross-industry way of working together to stay ahead of the criminals.

Failure to address vulnerability growth could contribute to a surge in cybercrime costs, which are projected to exceed $10.5 trillion globally by 2025. I think we need to also understand that the consequence of this is that everything is going to have to be funded—just as firemen and police are funded—to the tune of now over $12 billion a year. And this is to keep the hackers from taking the money off of our Internet-connected devices. Moreover, new vulnerabilities are published every 17 minutes.

Key Metrics	Data Insights
Vulnerability Rating	Nearly 50% are high or critical
Cybercrime Cost	Over $10.5 trillion by 2025
Annual Cybersecurity Budget	Over $12 billion
Vulnerability Discovery	Every 17 minutes

3. Budgetary Misconceptions in Security

In the realm of software cybersecurity, it is a short step from seeing security as just another item on the budget checklist to creating exploitable weaknesses in software products. As we move deeper into the current cyber threat landscape, the strategic imperative for the software industry is to deliver secure software aligned with business objectives and, to do that, protect itself in a much more robust manner than has been typical.

Example

Companies that increased investment in cybersecurity saw a decrease in successful breaches, highlighting the importance of strategic budgeting.

To clear up any misconceptions about budgeting for cybersecurity, we first need to acknowledge that it requires a serious strategic financial commitment. Research indicates a projected 15.1% increase in global information security spending, signaling a shift from reactive to strategic budgeting. And this seems to extend across the entirety of our current cloud-based IT infrastructure, which now occupies 35.9% of budgets.

Budget Area	Percentage of IT Budget	Strategic Focus
Cloud-based IT Infrastructure	35.9%	Emphasizes strategic alignment
Information Security Spending	15.1% increase	Shift from reactive to strategic
API Security	Critical investment area	Enhances system security
Human Risk Management	Critical investment area	Reducing human-related vulnerabilities
IoT Security	Critical investment area	Securing interconnected devices

“Cybersecurity must be regarded as a fundamental component of the business strategy.”

This is especially the case when investing in key areas like API security, human risk management, and IoT security, where the right kind of investment is critical. Data from Deloitte highlights a shift in the industry toward maintaining existing systems rather than solely funding capital investments for new systems. Ensuring that a company’s cybersecurity strategy is aligned with its business objectives means that the whole conversation around cybersecurity is elevated from an operational one to a strategic one instead.

In both the software development and operational phases, it is of utmost importance to safeguard against potential breaches. Such defenses can be executed in many ways, but one increasingly popular way is through network segmentation. Not only is network segmentation a smart move from a security standpoint, but investment in emerging technologies such as AI and machine learning can further enhance threat detection and illustrate a return on investment that ties security measures to financial growth and protective measures.

Allocating security budgets in a strategic manner is not just a need; it’s a promise to protect digital property and to keep intact the organization’s edifice in an era of seemingly boundless cybersecurity threats. When we talk about an approach that sharpens the focus on security investments, we are really discussing a set of principles that makes an organization not only more secure but also more confident that it can achieve its goals in a future where every dollar spent on security is a dollar well spent.

4. Neglected Communication with Security Teams

In the software business, the effective handling of threats to cybersecurity hinges on clear communication between the upper crust and the security teams. When the two parties interact well, the correct responses to the most urgent cybersecurity issues are almost always prompt, and the responses’ directions are almost always accurate. And when cybersecurity measures are aligned and acting together, you can count on them to be robust measures—difficult for evildoers to penetrate.

Tip

Regular feedback sessions between teams can help in identifying communication barriers and enhancing mutual understanding.

“Failing to account for fundamental communication components can produce a cybersecurity result that is, at best, cobbled together and, at worst, just plain broken.”

The necessity of going beyond mere operational concerns in cybersecurity leadership is underscored by Kaushal Perera, CISSP, who highlights the importance of fostering an environment of collaboration and communication (source). He seeks to encourage collaboration and communication in an otherwise top-down structure where, for true success, the security team must work harmoniously with executives. When these groups hold regular dialogues, a shared comprehension of not just the “how” but also the “why” of security emerges. This is certainly helpful for managing threats that could otherwise develop into full-blown crises.

On the other hand, communication must be strategic. For security professionals, it is essential to take complicated technical matters and present them in terms business executives can understand—that is, in terms of risk to the enterprise. It is even better when visual models are used to depict the organization’s risk posture and the risk metrics it uses to assess critical factors over time. Clear articulation equates to executive buy-in for policies, necessary investments, and desired changes to make the enterprise more secure.

Establishing communication both inside and outside of the organization supports the amplification strategy. When the employees and technical experts within an organization are engaged and communicating, they form an open pathway through which organizational knowledge can flow. This is a prerequisite for enacting the organizational openness strategy. After all, knowledge of what’s happening both internally and externally is foundational for trust.

Not having strong communication channels means missing opportunities to be proactive rather than reactive, and in cybersecurity, anticipation is often key to avoiding disaster. A robust communication framework underpins a security-minded culture, aligning efforts with overall business strategies and ensuring that every layer of the organization is equipped to handle cybersecurity threats effectively (source).

Key Factors for Effective Cybersecurity Communication	Description
Alignment Between Executives and Security Teams	Ensures prompt and accurate responses to cybersecurity threats.
Regular Dialogues	Fosters a shared understanding of both “how” and “why.”
Strategic Communication	Translates technical matters into business risk language.
Visualization of Risk	Depicts risk posture and metrics to facilitate decision-making.
Organizational Engagement	Promotes knowledge flow and trust-building.
Proactive Communication Framework	Aligns with business strategies to handle threats effectively.

5. Lack of Multifactor Authentication and Email Security

Phishing and unauthorized access attempts threaten many organizations today. These two schemes would be much less successful if companies implemented simple, common-sense security measures. For instance, requiring a physical security key to log in to an account would thwart almost every attacker, even the ones who employ social engineering.

Fact

Multifactor authentication can stop nearly 100% of hacking attempts, as noted by Microsoft.

“A security key is not a viable option for every account due to practicality issues,” Ryan A. Higgins mentioned, highlighting the challenges in implementing some security measures effectively.

Unfortunately, a security key for every account is not a viable option, and using one is not very practical either. Because of this, we need to use alternative methods of securing our accounts. One such method is multifactor authentication (MFA). MFA enhances identity verification by requiring additional forms of identification beyond a password. This extra layer is critical because even if a password is compromised, unauthorized users face a significant barrier to accessing the system. Google has noted that hackers steal around 250,000 logins weekly, underscoring the inadequacy of traditional passwords and the necessity for stronger protections according to Okta.

Security Measure	Effectiveness	Challenges
Physical Security Key	Blocks nearly all social engineering attacks	Impractical for all accounts
Multifactor Authentication	Stops nearly 100% of hacking attempts	Complexity for users and implementation costs
Passwords Alone	Inadequate for modern threats	Easily compromised; insufficient protection

Ryan A. Higgins, the Chief Information Security Officer at the U.S. Department of Commerce, underscores the part that MFA plays in giving us greater security in a world where we rely on passwords to access critical systems and services. He states that while passwords remain a common security measure, they are no longer sufficient alone. Implementing a second authentication factor boosts confidence that the correct individual is accessing critical systems and services as highlighted by the U.S. government.

According to Microsoft, MFA can stop nearly 100% of account hacking attempts. As sophisticated cyber threats assail organizations, adopting increasingly ordinary security measures can leave one vulnerable. In contrast to the arts and sciences of account hacking, the tools and tactics for protecting accounts are too often dumbed down and rendered ineffective when users are mandated to rely solely on them.

As regulations like GDPR and NIST push for more robust security measures, IBM reports an anticipated rise in MFA adoption. The presumed need for such “potent” measures as these is further evidence of a woefully inadequate “baseline” by which we seem to have settled that’s raising levels of vulnerability not only for organizations but also for the billions of people who use their services.

6. Sporadic System Updates

Infrequent system updates can greatly undermine a company’s overall cybersecurity by leaving known vulnerabilities unpatched. Regular, scheduled updates are an essential aspect of maintaining a solid security posture. The bad guys are quick to take advantage of weaknesses in outdated software to gain entry to sensitive information or cause operational mayhem.

Example

Organizations that implemented regular update routines saw a significant drop in cyber incidents.

Organizations need to prioritize consistent software updates to patch security flaws, enhance performance, and introduce new features that guard against advanced threats such as ransomware and phishing.

“Failing to update systems routinely can leave doors hackers love to exploit wide open.” – Stephen Wycoff

These essential tasks fall in line with what is becoming an almost overly emphasized but still critical point: that software needs to be enjoyed as much as it is heeded, and in order to truly enjoy it, you must also use it.

Cyber threats are growing and changing quickly. The rapid evolution of cyber threats necessitates vigilance in keeping software up-to-date. This proactive approach not only mitigates risks associated with zero-day vulnerabilities but also ensures compliance with cybersecurity regulations, preserving trust with clients and stakeholders. Using cheap labor in places like India to do the update checks simply isn’t viable if we want to maintain that trust, and that is the explanation for the use of semi-automated updates.

For those who work in the software industry, the pressing demand for cybersecurity means being very much aware of the threats posed by erratic software updates. Staying ahead of the demand requires an unswerving commitment at every level of the organization to a well-planned maintenance discipline—not an easy task when software is inherently rife with irregularities and when “today’s threats can all too easily become tomorrow’s well-documented vulnerabilities.”

Frequency of Updates	Potential Cybersecurity Impact
Frequent	Minimizes vulnerabilities, enhances security posture
Scheduled	Ensures compliance, builds trust with clients and stakeholders
Infrequent	Leaves systems open to exploitation, increases risk of breaches
Erratic	Difficulty in managing updates, increases potential for downtime

FAQ

What are some overlooked red flags in cybersecurity?

Potential breaches that are not being given adequate attention, increasing numbers of vulnerabilities, misunderstanding of security budgets, and even neglect in communicating with security teams present a serious risk to organizations. So, too, does a failure to use multifactor authentication, secure email, and to regularly update systems. All of these are key areas to pay attention to in light of today’s cybersecurity landscape.

How can organizations mitigate the risk of overlooked breach potential?

Assuredly, companies can instill in their cultures the importance of employees using strong passwords. They can impress upon employees the importance of not just using passwords but using them in conjunction with multi-factor authentication, and they can train security employees and everyone else in the organization to be on the lookout for both digital and in-person social engineering that bad actors might use to compromise their passwords or accounts.

Why is addressing vulnerability growth essential in cybersecurity?

When we ignore the growth of vulnerabilities, we allow threats to evolve quickly, and we know that they do this far too rapidly for our comfort. We are always the targets of an enemy—whether alone or in a set of collaborators—who seeks to create damage, chaos, or fear. These enemy actors come after us all the time, night and day.

What misconceptions exist regarding cybersecurity budgeting?

Numerous people see cybersecurity as a mere line item on the budget sheet, and in doing so, they undermine its importance. It is vital that strategic, financial, and targeted business investments be made in cybersecurity to align with and further ensure the achievement of business goals—and to provide a far-reaching protection plan that covers all the business’s bases.

How important is communication between executives and cybersecurity teams?

Effective cybersecurity threat management is dependent on communication that is smooth and seamless. This is especially true for aligning security measures and responding rapidly when they must be enacted. At a more strategic level, it concerns “making sure the decisions we are all part of and support do not compromise any of the business’s priorities”.

How does multifactor authentication enhance security?

Another layer of protection is in place for password-protected accounts. These accounts are now secured with multifactor authentication, which adds an additional element of security that user accounts weren’t previously required to have. Despite it being termed multifactor, this additional element can actually take three forms: something you know (like a password), something you have (like a cellphone), or something you are (like your fingerprint).

What are the risks associated with sporadic system updates?

When a system is not updated frequently, it creates unpatched vulnerabilities that are known to exist and that pose significant cybersecurity risks. Regular updates are essential for a variety of reasons. Security flaws need to be fixed. Performance needs to be improved. And advanced threats need to be countered.