Survey: Most Enterprises Fear Disruption to Business Critical Applications, Yet Don’t Prioritize Securing Them
Ami Rojkes Dombe
| 17/04/2019
bigstockphoto
According to a new CyberArk survey, the majority of organizations (nearly 70%) do not prioritize protecting the applications that their businesses depend on, such as ERP and CRM systems, any differently from how low-value data, applications or services are secured.
The independent survey was conducted among 1,450 business and IT decision makers, primarily from Western European economies. Respondents indicated that even the slightest downtime affecting business-critical applications would be massively disruptive, with 61% agreeing that the impact would be severe.
Breaches affecting applications that are the lifeblood of a business can result in punitive costs, with a 2018 report estimating the average cost of an attack on an ERP system at $5.5 million. The threat activators that enterprises face are formidable. A case in point: Organized crime was behind 50% of all breaches in 2018, with attacks using established tactics like privilege abuse to achieve their aims.
Despite the fact that more than half (56%) of organizations have experienced data loss, integrity issues or service disruptions affecting business critical applications in the previous two years, the survey found that a large majority (72%) of respondents were confident that their organization could effectively stop all data security attacks or breaches at the perimeter.
This brings to light a remarkable disconnect between where security strategy is focused and the business value of what is most important to the organization. An attacker targeting administrative privileges for these applications could cause significant disruption and could even halt business operations.
The survey also found that 74% of organizations indicated they had moved (or would move within two years) business-critical applications to the cloud. A risk-prioritized approach to protecting these assets is necessary for this transition to be managed successfully. Further industry data shows that globally, 69% of organizations are migrating data for popular ERP applications to the cloud.
“From banking systems and research and development to customer service and supply chain, all businesses in all verticals run on critical applications. Accessing and disrupting these applications is a primary target for attackers due to their day-to-day operational importance and the wealth of information that resides in them, whether they are on-premises or in the cloud,” said David Higgins, EMEA technical director at CyberArk.
“Chief information security officers must take a prioritized, risk-based approach that applies the most rigorous protection to these applications, securing in particular privileged access to them and assuring that regardless of what attacks penetrate the perimeter, they continue to run uncompromised.”
The CyberArk-sponsored survey was conducted by Arlington Research among 1,450 business and IT decision-makers in eight countries in Europe, the Middle East and Africa: the UK, France, Germany, Italy, Spain, Switzerland, the Netherlands, and Israel.
bigstockphoto
According to a new CyberArk survey, the majority of organizations (nearly 70%) do not prioritize protecting the applications that their businesses depend on, such as ERP and CRM systems, any differently from how low-value data, applications or services are secured.
The independent survey was conducted among 1,450 business and IT decision makers, primarily from Western European economies. Respondents indicated that even the slightest downtime affecting business-critical applications would be massively disruptive, with 61% agreeing that the impact would be severe.
Breaches affecting applications that are the lifeblood of a business can result in punitive costs, with a 2018 report estimating the average cost of an attack on an ERP system at $5.5 million. The threat activators that enterprises face are formidable. A case in point: Organized crime was behind 50% of all breaches in 2018, with attacks using established tactics like privilege abuse to achieve their aims.
Despite the fact that more than half (56%) of organizations have experienced data loss, integrity issues or service disruptions affecting business critical applications in the previous two years, the survey found that a large majority (72%) of respondents were confident that their organization could effectively stop all data security attacks or breaches at the perimeter.
This brings to light a remarkable disconnect between where security strategy is focused and the business value of what is most important to the organization. An attacker targeting administrative privileges for these applications could cause significant disruption and could even halt business operations.
The survey also found that 74% of organizations indicated they had moved (or would move within two years) business-critical applications to the cloud. A risk-prioritized approach to protecting these assets is necessary for this transition to be managed successfully. Further industry data shows that globally, 69% of organizations are migrating data for popular ERP applications to the cloud.
“From banking systems and research and development to customer service and supply chain, all businesses in all verticals run on critical applications. Accessing and disrupting these applications is a primary target for attackers due to their day-to-day operational importance and the wealth of information that resides in them, whether they are on-premises or in the cloud,” said David Higgins, EMEA technical director at CyberArk.
“Chief information security officers must take a prioritized, risk-based approach that applies the most rigorous protection to these applications, securing in particular privileged access to them and assuring that regardless of what attacks penetrate the perimeter, they continue to run uncompromised.”
The CyberArk-sponsored survey was conducted by Arlington Research among 1,450 business and IT decision-makers in eight countries in Europe, the Middle East and Africa: the UK, France, Germany, Italy, Spain, Switzerland, the Netherlands, and Israel.
