The last few months have stretched businesses, security teams and individuals to extraordinary lengths. They’ve also thrown into sharp relief a number of challenges and opportunities. What’s more, unintended consequences of earlier actions have emerged. How to make the best of this situation?
That’s the question we posed to ITV’s Deputy Global CISO, Jaspal Jandu, as well as the Executive Vice President of F-Secure’s Managed Detection and Response, Tim Orchard and F-Secure’s Director of Detection and Response, Matt Lawrence in a recent webinar.
The panel identified everyday security challenges that had been amplified by lockdowns, how the user experience for employees has changed – and how ITV has tackled this problem with flair – and the unintended consequences of pre-pandemic decisions have manifested themselves. Other topics included the importance of vendors owning their entire tech stack, enabling and disabling access to sensitive production systems for freelance staff and whether Zero Trust is finally about to enjoy its day in the sun.
Our panel also fielded questions from attendees, and a series of polls showed how security professionals are seeing their organization’s culture and attitude to security changing in response to the situation.
Remote working lifts off – and stays up
The standout stat for us was the move to remote working; almost 95.5% of those responding said their organization would maintain a higher level of remote working post-lockdown. This didn’t come without concerns, however: 60% were now highly concerned about securing remote workers.
Culture and tech changes beat organizational change
When asked if their organisation was considering adapting its approach to technology, culture or organization in light of the pandemic, the vast majority – almost 97% of respondents – pointed to one or more of these elements changing.
Almost 79% of attendees who responded said technological change was on the agenda – while almost 85% pointed to cultural change. Only 42.42% said organisational change was on the cards, while just over 3% said no change was likely to occur.
Finally, when asked if the panel discussion equipped attendees with the tools needed to evaluate their cyber security basics, over 86% said they agreed to at least some extent.