"Outsourcing Security is The Only Solution For Many Smaller Teams"

According to new research by Cynet, companies with small security teams continue to face a number of distinctive challenges that place these organizations at greater risk than larger enterprises.  The researchers stated that these enhanced risks are moving these companies to consolidate security platforms to fewer, more robust, and comprehensive tools to simplify and improve protections.  The researchers surveyed 200 CISOs at SMEs with five or fewer security staff members and cybersecurity budgets of $1 million or less.   The researchers found that a majority of these organizations were overwhelmed by an endless volley of cyberattacks.  The participants reported that they are inundated by many of the same threats facing larger organizations but lack the financial resources, staff specialists, training, and proper tools to consistently remediate them.  More than half (58%) of the responding CISOs felt their risk of attack was higher compared to enterprises, despite the fact that enterprises have a larger target on their back.  Most participants (94%) say they have barriers in maintaining their security posture due to a lack of skilled security personnel (40%), excessive manual analysis (37%), and the increasingly remote workforce (37%), among other factors.  Many participants (87%) have difficulty in managing and operating their threat protection products due to overlapping capabilities (44%) and difficulty visualizing the full scope of an attack (42%).  The researchers noted that as a result, 90% of small security teams are outsourcing security mitigation to a Managed Detection and Response (MDR) service while also using Managed Security Service Provider (MSSP) services (21%) and Virtual Chief Information Officer (vCISO) services (15%).   The researchers also discovered a huge year-over-year rise in the use of Endpoint Detection and Response (EDR) tools (from 52% to 85% of respondents), as well as a doubling of Extended Detection and Response (XDR) tool usage (from 15% to 30%).

Help Net Security reports: "Outsourcing Security is The Only Solution For Many Smaller Teams"