Security

Cybersecurity is the practice of defending computers, servers, mobile devices, electronic systems, networks, and data from malicious attacks. It's also known as information technology security or electronic information security. 

Over the past decade, criminals have been able to seize on a low-risk, high-reward landscape in which attribution is rare, and significant pressure is placed on the traditional levers and responses to crime. In the next 10 years, the cybersecurity landscape could change significantly, driven by a new generation of transformative technology.

To understand how to secure our shared digital future, we must first understand how the security community believes the cyberthreat will change and how the consequent risk landscape will be transformed. This critical and urgent analysis must be based on evidence and research and must leverage the expertise of those in academia, the technical community, and policymakers around the world.

INDUSTRY STATS

• Managed Security is expected to grow from $17B in 2016 to $33B in 2021 (Markets & Markets)
• A new company is hit with ransomware every 40 seconds (Kaspersky Security Bulletin)
• 91% of companies feel vulnerable to hacks (CFO Magazine)
• 79% of global companies experienced cybercrime in the past 12 months (Source: pwC/CIO & CSO Magazine, Global State of Information Security Survey)
• $4 million dollars is the average cost of a security breach (IBM)

Security covers a broad range of services, from managed firewalls and IDPS to DDoS Mitigation and SIEM. Leading solutions analyze behavior to detect ever-changing threats, communicate with multiple systems to provide a comprehensive view into the environment, and include 24/7/365 Security Operations Center (SOC) support for event notification and remediation.

• What security or compliance regulations do you need to adhere to?
• How often do you undergo a third-party security assessment? Do you know what your weak spots are, and how to address them?
• In the event of a breach or attack, what policies and procedures do you have in place?
• What are the hours of operation for your internal or external security resources?
• Do you have a SIEM or log management system in place? If so, who reviews and correlates the alerts?
• How do you secure access to IT infrastructure and applications for remote users, BYOD employees, contractors, and third parties?
• How do you identify suspicious or abnormal behavior on your corporate network?
• Do you have any public-facing web applications or sites? What is the financial implication if those go down for an hour or a day?