"Splunk Report Finds Public Sector Organizations Lack Cybersecurity Intelligence"
According to new research from Splunk, public sector organizations lack the cybersecurity intelligence they require, and the problem is far worse than in the private sector. The Splunk 2022 Public Sector Survey reveals that nearly half of public sector agencies struggle to use data to detect and prevent cybersecurity threats, and 50 percent find it difficult to use data to inform cybersecurity decisions. It was discovered that 56 percent of public sector agencies have difficulty leveraging data to mitigate and recover from cybersecurity incidents. The report also looked into the data issues that directly affect public-private partnerships. According to the report, 44 percent of respondents in the public sector believe that the shared cybersecurity intelligence available to them should be improved for their needs, compared to 29 percent of respondents in the private sector. Despite a general trend toward sharing cybersecurity intelligence, the survey found that public and private sector organizations are less likely to share cybersecurity intelligence outside their sector. Only 42 percent of respondents in the public sector report regularly sharing data with the private sector, while 38 percent of private sector respondents report sharing data with government agencies. The report cites challenges and scarce resources in leveraging data as the leading causes behind the lack of data sharing. Although dealing with cybersecurity in the public sector may be more difficult, both the public and private sectors share similar cybersecurity priorities. Improving threat response and remediation ranked first in the public and private sectors. Both the public and private sectors are planning investments to address cybersecurity priorities, including monitoring, threat intelligence, and security assessments. However, the private sector is more likely to plan investments in security orchestration, automation and response, centralized log management, and observability. This article continues to discuss the data challenges weakening the cybersecurity posture of organizations.