A new survey of public-sector organizations found that budget constraints and the complexity of IT environments continue to hamper cybersecurity efforts, especially in the federal government.<\/p>\n\n\n\n
According to a survey done by SolarWinds, an IT management company, 24 percent of federal respondents said that budgetary constraints limited entities\u2019 ability to improve IT security, while 21 percent cited complex internal systems.<\/p>\n\n\n\n
\u201cLed only by budget constraints, complexity of internal environments is one of the most significant high-level obstacles to maintaining or improving IT security, and respondents indicated it\u2019s keeping them from easily segmenting users and adopting a zero-trust approach,\u201d said Brandon Shopp, vice president for product strategy at SolarWinds.<\/p>\n\n\n\n
Those two numbers are continuing to change year-over-year. Budgetary constraints are decreasing, dropping from 40 percent in the 2018 survey to 24 percent last year.<\/p>\n\n\n\n
Network complexity results remained at 21 percent like last year, but that number was 14 percent in 2014, when the survey started.<\/p>\n\n\n\n
The survey included 200 federal IT operations and security leaders, 100 state and local, and 100 education leaders.<\/p>\n\n\n\n
Across all respondents, 52 percent said that \u201ccareless and untrained\u201d insiders were the top threat to cybersecurity.<\/p>\n\n\n\n
\u201cSecurity is everyone\u2019s job, but holding the team accountable is lacking. Until there are real individual accountability regimens in place, the network will remain at risk,\u201d one federal civilian division chief told SolarWinds.<\/p>\n\n\n\n
Less than half of respondents expressed confidence in their team\u2019s ability to keep up with emerging threats, even if their security operations center is outsourced. According to results, 86 percent of respondents rely on in-house staff as the main security team, but only 41 percent felt \u201cvery confident\u201d that their team could maintain the right skills.<\/p>\n\n\n\n
Fifty-seven percent of respondents told SolarWinds that their organizations were most mature in end-point security and continuity of operations. Fifth-six percent also said their organizations were most mature in identity and access management.<\/p>\n\n\n\n
\u201cHowever, there was not a single cybersecurity capability for which more than 57 percent of respondents claimed to be organizationally mature,\u201d according to the SolarWinds news release.<\/p>\n\n\n\n
Sixty-one percent of public sector organizations segment users by risk level, but struggle to do so because of the growing number of devices and number of users that need access to the networks. Around one-third of respondents said their organization had established a zero-trust strategy, while another one-third don\u2019t have a formal strategy established but are \u201cmodeling their approach based on zero trust.\u201d<\/p>\n\n\n\n
\u201cThese results clearly demonstrate the degree to which most public-sector organizations are struggling to manage cyber risk,\u201d said Tim Brown, vice president of security for SolarWinds. \u201cWhile it\u2019s heartening to see that almost two-thirds of respondents are formally segmenting users \u2014 a helpful step in managing risk \u2014 the data finds careless and untrained users to still be the weakest link.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"
Budgetary constraints and complex IT environments hurt public-sector organizations’ cybersecurity efforts.<\/p>\n","protected":false},"author":7,"featured_media":45845,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":14,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":{"9":{"categories":["cyber"],"primary_category":"cyber"}}},"categories":[104,106,31,110,14,33],"tags":[],"coauthors":[3242],"class_list":["post-14844","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-acquisition-update","category-daily-brief","category-home","category-it-cloud-report","category-it-networks","category-newsletters"],"acf":{"subheadline":"","legacy_arc_id":"M4NZEGU5UFFZVELSMUUZM2BIPM","arc_canonical_url":"\/civilian\/2020\/02\/25\/what-hinders-cybersecurity-in-the-public-sector\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"\n