CISOs around the world lack confidence in their company’s ability to defend against cyberattacks. This also puts CISOs under personal pressure.
Proofpoint surveyed 1,600 CISOs worldwide, from the Netherlands to Brazil and Singapore. The research shows that the role of a CISO is not an easy task. Seven out of ten CISOs fear that their organization could fall victim to a cyberattack in the next twelve months, and 31 percent even consider this threat to be “very likely.”
This figure is roughly the same as in 2023, when 68 percent feared a cyberattack. In 2022, less than half did. 43 percent fear that their employer is not adequately prepared for a possible cyberattack. This is an improvement from 61 percent in 2023. 46 percent actually experienced a data loss, compared to 63 percent in 2023.
The human factor
Today, threats come from all directions. Ransomware is back at the top of the list of threats: 41 percent cite it as the number one threat. The rapid advancement of AI is also a cause for concern for CIOs. 54 percent fear that AI could pose a potential risk, especially in the education sector.
However, CISOs still see their own employees as the biggest threat, which can range from human error to deliberate malicious intent. However, 86 percent believe that employees are aware of their responsibilities. CISOs are turning to AI technology to correct human errors.
Better be a CISO
The constant threat of cyberattacks is putting CISOs under a lot of pressure. Two-thirds feel that their expectations are too high and more than half have suffered burnout in the last twelve months. In addition, available budgets are being cut again. CISOs also fear personal consequences if their organization is affected by a cyberattack.
One positive note: CISOs feel better understood by the board. 84 percent feel that they are on the same wavelength as their superiors. Two years ago, this was only the case for 52 percent. Proofpoint’s conclusion here differs from earlier studies by Trend Micro and Palo Alto, which found that security teams are still often alone within organizations.