A new CyberArk global report revealed that 87% of Australian senior security professionals surveyed state that cyber security has taken a back seat in the last year in favour of accelerating digital business initiatives.
The CyberArk 2022 Identity Security Threat Landscape Report identifies how the rise of human and machine identities – often running into the hundreds of thousands per organisation – has driven a build-up of identity-related cyber security “debt”, exposing organisations to greater cyber security risk.
According to Udi Mokady, founder, chairman and CEO, CyberArk, the past few years have seen spending on digital transformation projects skyrocket to meet the demands of changed customer and workforce requirements.
“The combination of an expanding attack surface, rising numbers of identities, and behind-the-curve investment in cyber security – what we call cyber security debt – is exposing organisations to even greater risk, which is already elevated by ransomware threats and vulnerabilities across the software supply chain.
“This threat environment requires a security-first approach to protecting identities, one capable of outpacing attacker innovation,” Mokady said.
Every major IT or digital initiative results in increasing interactions between people, applications and processes, creating large numbers of digital identities. If these digital identities go unmanaged and unsecured, they can represent significant cyber security risk.
Security professionals agree that recent organisation-wide digital initiatives have come at a price. This price is cyber security debt, security programs and tools have grown but not kept pace with what organisations have put in place to drive operations and support growth.
This debt has arisen through not properly managing and securing access to sensitive data and assets, and a lack of identity security controls is driving up risk and creating consequences.
The debt is compounded by the recent rise in geopolitical tensions, which have already had direct impact on critical infrastructure, highlighting the need for heightened awareness of the physical consequences of cyber attacks:
Around 87% of Australian organisations report prioritising the maintenance of business operations over ensuring robust cyber security in the last 12 months (compared to 79% globally).
And about 56% have identity security controls in place for their business-critical applications (compared to 48% globally).