MetricStream Global Survey Reveals Chasm Between IT Cyber Risk Management Strategy and Actual Practice
Feb 9, 2021
SAN JOSE, Calif., Feb. 9, 2021 /PRNewswire/ -- MetricStream, the market leader in governance, risk, and compliance (GRC), and integrated risk management products and solutions, today unveiled the results of their global IT Risk and Compliance Survey, in which enterprise security and risk professionals from around the world addressed top IT cyber risk concerns for 2021. Key findings show despite risk management taking center stage at the executive level, most organizations still rely on spreadsheets to manage IT risks.
"Most security and risk professionals know that IT security is like a chain; you are only as strong as the weakest link," said Gaurav Kapoor, COO, MetricStream. "Despite breakthrough advancements in artificial intelligence, machine learning and other advanced risk management technologies, the weakest links – spreadsheets – underpin a majority of enterprise risk management programs."
The MetricStream IT Risk and Compliance Survey queried security and risk professionals from around the world to address top issues around IT and cyber risks. Respondents include representatives from multiple industries, including: financial services, telecom, technology, manufacturing, government, education, healthcare and transportation.
Key Finding: Risks are evolving; compliance violations remain top of mind
To find out what keeps security and risk professionals up at night, MetricStream asked what risks and threats their organization faced in the last two years. "Denial of Service" took the top spot, followed closely by "Compliance violations and regulatory actions." Taking third was "Spoofing of company social media."
Key Finding: IT risk programs have executive visibility; the majority are not driven by the CISO
The survey shows that 70 percent of respondents agree that their senior management and leadership help establish the strategic direction of their IT risk management program. However, only 29 percent of respondents say that their IT risk program rolls up to the Chief Information Security Officer (CISO).
Key Finding: Most IT risk programs have yet to reach optimal maturity
When asked about the maturity level of their IT risk programs, 69 percent of respondents stated that they are not quantitatively managing their IT risk program. Furthermore, 31 percent of respondents report having IT risk assessment reviews on a quarterly basis. Only 15 percent stated having monthly reviews.
Key Finding: The number one tool used for IT risk management – spreadsheets
When asked what tools are used for IT risk management, the number one response was spreadsheets. More than 45 percent of respondents reported using spreadsheets, even if they had an IT GRC solution in place. Moreover, 54 percent stated not using any IT GRC solution to manage IT risks.
Key Finding: Investment in security and compliance are top risk priorities for 2021
When asked about future plans, 38 percent of respondents stated that they are planning to increase their spend on IT risk management in 2021. Additionally, respondents ranked their top 2021 priorities to be: 1) investment in IT security solution, 2) compliance with federal and government regulations, and 3) IT security data aggregation and reporting.
The entire results of the MetricStream 2021 IT and Cyber Risk Survey is available for download here: MetricStream IT Risk and Compliance Survey Report 2021
About MetricStream, Inc.
MetricStream is the global market leader for Governance, Risk, and Compliance (GRC) and integrated risk management solutions, providing the most comprehensive solutions based on a single platform that includes Operational Risk, Compliance, Audits, IT and Cybersecurity, Business Continuity and Third-Party Risk Management. Since 2008, MetricStream has empowered organizations to intuitively harness front-line intelligence that enables all stakeholders to make real-time risk-aware business decisions. MetricStream is headquartered in San Jose, California, with an operations and R&D center in Bangalore, India, and sales and operations support around the globe. More information is available at www.metricstream.com, LinkedIn, Facebook and Twitter.
MetricStream and the MetricStream logo are trademark or registered trademarks of MetricStream, Inc.
CONTACT:
Chris McKie
MetricStream, Inc.
[email protected]
More News
DoorDash to Buy Instacart for $17 Billion, Uniting 2 Delivery Giants
The deal combines the country’s largest restaurant delivery service with its biggest online grocery platform.
Christine Lagarde to Step Down as President of European Central Bank
Her plan to depart in February, months before the end of an eight-year term, sets in motion a selection process among European leaders for a new central bank president.
'I live with a ghost' - inside the haunted homes attracting bargain hunters
Properties where someone has died in tragic circumstances can have big reductions in price.
In Moving Gradually, Fed Risks Having to Play Catch-Up to Quell Inflation
Federal Reserve officials are expected to restart rate increases in December, but the cadence of additional moves will depend on the data.
Hit the Road This Season With These Useful New Map Features
The recent updates to Google Maps and Apple’s Maps use artificial (and human) intelligence for better navigation, planning and travel guides.
An ‘Endless’ Cruise Around the World Is Suspended, Leaving Passengers Stranded
The cruise promised a lifetime of sailing, for less than what it cost to live on land. But it was underfunded and couldn’t absorb the rising cost of fuel.
Hello Kitty maker cuts ties with Japanese spy drama after China backlash
Sanrio has apologised after its merchandise line with Japanese TV series Vivant drew criticism.
Chancellor says government has 'moral duty' to help young people out of work
Chancellor John Healey says any cuts to welfare will be done "in a Labour way".
'We need help for small businesses, not punishment'
People in Bilston react to the new Budget set out by Chancellor John Healey.
Fuel is now liquid gold, haulier says after theft
The fuel was stolen from two vehicles at the weekend, the director of M Pinches & Sons Ltd said.
U.S. Restricts Trade With Chinese Genomics Company
The move will block shipments from BGI, a major Chinese firm that U.S. officials allege is associated with forced labor and the abuse of minority groups.
Microsoft profits soar days after announcing thousands of layoffs
The week, the Windows developer said it would offer buyouts to 60,000 workers as it looks to curb costs.
YOUR NEWS, OUR NETWORK.
Do you have Great News you want to tell the world?
Be it updates about your business or your community, you can make sure that it’s heard by submitting your story to our network reaching hundreds of news sites across 6 verticals.