{"id":2583,"date":"2020-07-23T14:21:00","date_gmt":"2020-07-23T12:21:00","guid":{"rendered":"https:\/\/www.netpresenter.com\/knowledge-center\/want-to-improve-cyber-security-too-many-tools-arent-the-solution"},"modified":"2025-01-10T11:58:07","modified_gmt":"2025-01-10T10:58:07","slug":"want-to-improve-cyber-security-too-many-tools-arent-the-solution","status":"publish","type":"knowledge","link":"https:\/\/www.netpresenter.com\/knowledge-center\/cybersecurity-awareness\/want-to-improve-cyber-security-too-many-tools-arent-the-solution","title":{"rendered":"Want to improve cyber security? Too many tools aren’t the solution!"},"content":{"rendered":"\n

<\/path><\/svg><\/span><\/span>Estimated reading time: <\/span>4<\/span> minutes<\/span><\/p>\n\n\n\n

Cyber-attacks pose a serious and ever-increasing risk to any organization. IBM Security has found<\/a> that 51 percent of organizations have experienced a significant disruption of business operations due to a cybersecurity incident in the past two years. In response, organizations are taking more and more measures to make themselves resilient and improve cybersecurity awareness<\/a>. Nevertheless, IBM concludes current precautions are often still inadequate.<\/p>\n\n\n\n

IBM conducted a study among more than 3400 organizations, including hospitals, banks, and government institutions worldwide. It provides insights into the measures companies take and the results they achieve. For example, 26 percent of the organizations indicate that they have a company-wide Computer Security Incident Response Plan (CSIRP). In addition, organizations have 45 different security solutions and technologies on average in use.<\/p>\n\n\n\n

\"improve<\/a><\/strong><\/h2>\n\n\n\n

More isn’t always better<\/strong><\/h2>\n\n\n\n

Yet, more tools don’t necessarily result in better security. 30 percent of companies use over 50 security solutions and technologies; the excessive use of different tools results in a complex, inefficient environment. Companies with more than 50 tools appear to be 8 percent less good at detecting a cyber-attack and 7 percent worse at responding to an attack.<\/p>\n\n\n\n

Relying on technology alone isn’t enough. For this reason, IBM recommends an enterprise-wide and up to date CSIRP. Although the number of organizations with a CSIRP has grown in recent years, more than half of the plans aren’t sufficient. For example, the plans do not contain scenarios for frequent attacks such as DDoS, malware, or ransomware. Moreover, many security plans might be outdated: only 7 percent review the CSIRP quarterly, while 40 percent of the organizations have no set time period for reviewing or testing the CSIRP. Although it is impossible to rule out an attack completely, a good CSIRP can limit the damage, should your organization become a target.<\/p>\n\n\n\n

\n