As part of the recently published research report from ESG and the information systems security association (ISSA) titled, The Life and Times of Cybersecurity Professionals, 343 infosec pros were asked to identify the cybersecurity actions their organizations have taken over the past few years. This list serves as a good foundation for what we can expect in 2018.
The top responses were as follows:
What the ESG/ISSA data suggests is that the cybersecurity past is prologue. Let’s hope that CISOs do more than get more cash and go through the motions in 2018. Rather, I for one hope they assess needs, processes, and resources, and use increasing budgets for fundamental cybersecurity improvement.