CFOtech Asia logo
Technology news for Asia's CFOs and financial decision-makers
Story image

IT and security team collaboration crucial to data security

By Catherine Knowles
Tue 21 Jun 2022

New research commissioned by Cohesity reveals that while most IT and security decision makers believe they should jointly share the responsibility for their organisations data security strategy, many of these teams are not collaborating as effectively as possible to address growing cyber threats.

The survey also shows that of those respondents who believe collaboration is weak between IT and security, nearly half of respondents believe their organisation is more exposed to cyber threats as a result, and the implications of that could have catastrophic consequences for businesses.

The research is based on an April 2022 survey conducted by Censuswide, of more than 500 IT decision makers and Security Operations (SecOps) professionals (split nearly 50/50 between the two groups) from businesses in Australia and New Zealand - all of whom have a role in the decision-making process for IT or security.

The survey was conducted as more than 2 in 3 respondents (69%) believe the threat of ransomware in their industry has increased over the last year, with nearly half of respondents (46%) saying their organisation has been the victim of a ransomware attack in the last six months.

The survey uncovered the following results globally:

Security should be a shared responsibility: Almost three quarters (74%) of respondents overall (80% of IT decision makers and 68% of SecOps) somewhat or strongly agree that IT and SecOps should share the responsibility for their organisations data security strategy.

However, effective collaboration between IT and security teams is frequently not happening: Over a third of SecOps respondents (36%) believe the collaboration is not strong with IT, with 11% of those respondents going so far as to call it weak. Among IT decision makers, almost a sixth of respondents (15%), believe the collaboration is not strong. In total, more that 1 in 4 (26%) respondents overall believe the collaboration between the two groups is not strong.

In many cases, even though the threat of cyber attacks has increased, the level of collaboration between IT and SecOps has remained stagnant or has declined: Almost 2 in 5 (39%) of respondents, overall, said collaboration between the two groups has remained the same even in light of increased cyber attacks. In fact, 1 in 6 (17%) respondents said collaboration has actually decreased. While only 6% of IT decision makers said collaboration has decreased, over a quarter (28%) of SecOps respondents believe that is the case, highlighting substantial disparity between the two groups.

The on-going tech talent shortage is making matters worse: When asked if the talent shortage is impacting the collaboration between IT / security teams, almost 3 in 4 (74%) of respondents (76% of IT decision makers and 72% of SecOps) said, yes, it is having an impact.

As a result of this lack of collaboration between IT and SecOps, many respondents believe their organisation is more exposed: Among the IT and SecOps respondents who believe the collaboration is weak between the two groups, more than half (52%) believe their organisation is either more exposed (35%), or much more exposed (16%) to cyber threats.

The consequences of that exposure could be devastating for businesses and for careers: When asked what would be their worst fear about a lack of collaboration between security and IT if an attack takes place, 44% of all respondents fear business disruption, 43% are concerned about a loss of data, 39% are worried customers will take their business elsewhere, 30% are worried about paying ransomware, 29% fear finger pointing will take place and their team will be blamed should any mistakes occur, and 29% fear people from both teams (IT and SecOps) will be fired.

Cohesity chief information security officer Brian Spanswick says, “This research pinpoints there is often a lack of collaboration between IT and security teams that we’re seeing across many organisations today.

"For too long, many security teams focused primarily on preventing cyber-attacks, while IT teams have focused on data protection, including backup and recovery. A complete data security strategy must bring these two worlds together but in many cases, they remain separate, and this lack of collaboration creates significant business risks and can put companies at the mercy of bad actors.”

To further drive this point home, when respondents were asked how their company prioritised data backup and protection as part of their organisation's security posture or response to a cyber attack, 53% of IT decision makers said it was a top priority and a critical capability while only 39% of SecOps respondents said the same.

Spanswick says, “If SecOps teams are not thinking about backup and recovery, and lack next-gen data management capabilities as part of an overall security strategy, that's a problem.

"IT and SecOps teams need to collaborate before an attack takes place looking holistically across the NIST Cyber Security Framework which includes five core capabilities: identify, protect, detect, respond, and recover. If they wait to collaborate until their data is hijacked, that's too late and the results could be catastrophic for businesses.”

Overall, 78% of all respondents (80% of IT decision makers and 76% of SecOps respondents) somewhat or strongly agree that if security and IT collaborated more closely, their organisation would be better prepared to recover from cyber threats including ransomware attacks.

Furthermore, when respondents were asked what would give their organisation greater confidence that they could recover business systems quickly in the event of a ransomware attack, 43% of all respondents (50% of IT decision makers and 37% of SecOps respondents) said greater communication and collaboration between IT and security is key.

Related stories
Top stories
Story image
Robotic Process Automation / RPA
Western Union implements intelligent automation programme from SS&C Blue Prism and ISG
Western Union has successfully implemented a strategic intelligent automation programme from SS&C Blue Prism and its certified partner, ISG.
Story image
Telecommunications
WiFi as a Service market to reach $26 billion through 2032
As a result of the easy management of wireless infrastructure over cloud services, WaaS is experiencing rapid growth.
Story image
Ransomware
Examining the future of ransomware threats with Vectra’s CTO
As customers' valuable data move to the cloud, so will ransomware. What is the current landscape and what do we need to know?
Story image
Infrastructure
Symbio, Cisco partner to launch Webex Calling in Singapore
Symbio has partnered with Cisco to launch a unified communications offering for Cisco's Cloud Connect for Webex Calling.
Story image
Market growth
Salesforce unveils new offerings for consumer goods companies
Salesforce has announced new products for consumer goods companies to help brands navigate increasing market complexity more easily.
Story image
Fintech
Corpay announces new collaboration with Triterras
Corpay and fintech firm Triterras have announced a new collaboration between Corpay’s Cross-Border business and Triterras Inc.    
Story image
Open source
DataStax secures US$115 million to fund database expansion
DataStax has secured US$115 million in funding, which it will use to develop and expand its Astra DB multi-cloud database and Astra Streaming service globally.
Story image
Data
Kacific and Teleglobal support expansion of telecom networks in Indonesia
Kacific has partnered with Teleglobal in Indonesia to provide a large-scale deployment of mobile backhaul services to major telecommunications operators.
Story image
Education
Microsoft Hong Kong partners with CUHK Business School
The collaboration sees CUHK Business School become the first business school as the authorised exam centre for Microsoft Certifications in Hong Kong.
Story image
Recruitment
Thales on recruitment hunt for next disruptive innovations
"Recruiting new talent is part of Thales's belief in the power of innovation and technological progress to build a safer, greener and more inclusive world."
Story image
Cybersecurity
Tech and data’s role in the changing face of compliance
Accenture's study found that 93% of respondents agree or strongly agree new technologies such as AI and cloud make compliance easier.
Story image
Infosys
Preparing for the digital decade with the right workforce strategies
For a decade that started under the pall of the pandemic, the 2020s is poised to end with a bang with the digital economy swelling to a high across the world.
Story image
Motorola Solutions
Motorola Solutions deploys communication system to 5th Japanese airport
Motorola Solutions with its partner, Nippon Airport Radio Services deployed the mission critical communication system to Kansai.
Story image
Tech job moves
Tech job moves - Bitdefender, Cohesity, Fortinet & MODIFI
We round up all job appointments from June 27-30, 2022, in one place to keep you updated with the latest from across the tech industries.
Story image
Multi Cloud
Cloud is a tool, not a destination
For many years, “cloud” has been thought of as a destination which has led to a misguided strategy that sees an enterprise trying to shift all its applications to a single cloud provider – regardless of the specific needs and nuances of each individual workload.
Story image
Cloud
Cloudflare outage in 19 data centers worldwide due to own error
Cloudflare says its outage for 19 of its data centers yesterday was because of a change in a long-running project to increase resilience in its busiest locations.
Story image
Artificial Intelligence
Siemens expands NVIDIA partnership for industrial metaverse
Siemens is expanding its partnership with NVIDIA to enable the industrial metaverse and increase the use of AI-driven digital twin technology.
Story image
Artificial Intelligence
Accenture shares the benefits of supply chain visibility
It's clear that gaining better visibility into the supply chain will help organisations avoid excess costs, inefficiencies, and complexity to ultimately improve their bottom line.
Story image
Cybersecurity
Video: 10 Minute IT Jams - An update from CrowdStrike
Scott Jarkoff joins us today to discuss current trends in the cyber threat landscape, and the reporting work CrowdStrike is doing to prevent further cyber harm.
Story image
Infrastructure
New VMware offerings improve cloud infrastructure management
VMware has unveiled VMware vSphere+ and VMware vSAN+ to help organisations bring benefits of the cloud to existing on-prem infrastructure.
Story image
BitTitan
How to achieve your monthly recurring revenue goals
Monthly recurring revenue (MRR) is the ultimate goal, the most important issue on which anyone in the IT channel should focus.
Story image
State Library of Victoria
State Library of Victoria entrusts Oracle support and security to Rimini Street
“Our finance team are very happy with the support and security that Rimini Street provides, which keeps our assets and our customers secure."
Story image
Contact Centre
Customer service agents don't want to return to contact centres
A new report has revealed that 85% of customer service agents want to work full-time at home and not return to contact centre offices.
Story image
Collaboration
IT and security team collaboration crucial to data security
Many IT and security decision makers are not collaborating as effectively as possible to address growing cyber threats.
Story image
Robotic Process Automation / RPA
Salesforce announces latest generation of MuleSoft
Salesforce has introduced the next generation of MuleSoft, a unified solution for automation, integration and APIs to automate any workflow.
Story image
DNS
DigiCert acquires DNS Made Easy and affiliated brands
Greg Clark comments, says, "This combination enhances the security of certificate validation and enables the automation of future validations."
Story image
MarTech
Martech experts reveal the “buzz” on personalisation
In the digital age, innovative technology must be leveraged to power an efficient and effective relationship marketing strategy.
Story image
Talend
Forrester names Talend Leader in enterprise data fabric
Forrester has named Talend a leader among enterprise data fabric providers in the Forrester Wave: Enterprise Data Fabric, Q2 2022 report.
Story image
Digital wallets
NFTs are ready to disrupt the ticketing world
The last few months have seen NFTs wielded by digital creators to take ownership over their craft and content. Now other industries are beginning to understand the real-world value that these nifty decentralised tokens can provide.
Story image
Digital Transformation
What CISOs think about cyber security, visibility and cloud
Seeking to uncover the minds of CISOs and CIOs across Asia Pacific, my company recently asked Frost & Sullivan to take a snapshot of cloud adoption behaviour in the region.
Story image
Cloud
BT builds on Equinix partnership with new cloud offering
BT has launched a next-generation cloud connectivity offering extending its global network into strategic carrier-neutral facilities (CNFs) and building on its existing partnership with Equinix.
Story image
Artificial Intelligence
Juniper study reveals top AI trends in APAC region
Juniper's research shows an increase in enterprise artificial intelligence adoption over the last 12 months is yielding tangible benefits to organisations.
Story image
Sustainability
Honeywell launches new carbon energy management software for buildings
The new Carbon & Energy Management service allows building owners to track and optimise energy performance against carbon reduction goals, down to a device or asset level.
Story image
Cybersecurity
Vulnerable APIs costing businesses billions every year
Large companies are particularly vulnerable to the security risks associated with exposed or unprotected APIs as they accelerate digital transformation.  
Story image
Gartner
Gartner's top recommendations for security leaders
"Leaders now recognise that major disruption is only one crisis away. We can’t control it, but we can evolve our thinking, philosophy, program and architecture.”
Story image
Amazon Web Services / AWS
Qualtrics goes live on AWS Cloud Infrastructure in Japan
Organisations across Japan will now be able to access the Qualtrics XM/OS platform locally via data centre in the AWS Asia Pacific (Tokyo) region.
Story image
Infrastructure
Global investment in data centers more than doubled in 2021
DLA Piper's latest global survey finds the total investment in data center infrastructure worldwide rose from USD $24.4 billion in 2020 to USD $53.8 billion in 2021.
Story image
Collaboration
Enterprise service management: the importance of a one-stop shop
In an online world, employees and end-users want one place to go for all their questions and requests. Intranet technology and self-service portals are useful tools that help serve this purpose.
Story image
CSG
To win at 5G, telcos must tame their quoting chaos
The catalogs of CSP (communication service providers) market offerings are set to explode as new digital services emerge, powered by B2B2X business models.
Story image
Airwallex
How Airwallex helps businesses achieve globalisation success
As markets continue to shift, businesses need to be able to provide the same quality of service for customers regardless of where they are located around the world.
Story image
Tech job moves
Tech job moves - ActiveCampaign, Arcserve, LogRhythm & Qlik
We round up all job appointments from June 17-22, 2022, in one place to keep you updated with the latest from across the tech industries.
Story image
Music
Mastercard reveals first-ever album titled Priceless
Mastercard's music album Priceless has been unveiled at the Cannes Lions Festival of Creativity and features 10 songs by 10 artists worldwide.
Story image
Public Cloud
Public cloud services revenues top $400 billion in 2021
"For the next several years, leading cloud providers will play a critical role in helping enterprises navigate the current storms of disruption."
Story image
Remote Working
RDP attacks on the rise, Kaspersky experts offer advice
"Given that remote work is here to stay, we urge companies to seriously look into securing their remote and hybrid workforce to protect their data."