Managing money for security

February 2018 Information Security

The industry at large has tightened its belts this year, and as we head into 2018 if 2017 has taught us anything then it is that we can’t afford to skimp on cybersecurity. In fact, in 2017 so many businesses have had to make do with fewer resources to combat a much wider range of vulnerabilities, however, new threats are emerging almost daily.

According to a recent report by Gartner, the global spend for security solutions in 2017 reached $86.4 billion. According to the report, this is a 7% increase over the course of the year. Gartner predicts that this spend will increase this year, quite possibly reaching $93 billion.

“Gartner’s report also predicts that information and cybersecurity will be one of the industries that we can expect a great deal of growth. Top level executives are becoming more aware of the value of providing revenue for security, and that would include getting the right people with the right skills,” says Anvee Alderton, channel manager of Trend Micro Southern Africa.

Security solutions, however, don’t stop at the IT department. Correct training needs to be provided to staff on how to avoid breaches as well as how to make effective use of any security measures that are in place. If there is no co-operation or proper training for staff, timely application of patches and fixes may be delayed or not even happen at all.

So, before budgeting for more or different solutions, it’s vital to examine the security solutions and systems that are already in place. Instead of adding more and more, perhaps a legacy system can be modified or solutions with overlapping capabilities can be consolidated. Once that’s done, any gaps will be evident, and plans can be made to fill them.

“One of the things to look at for 2018 is whether or not you have space in your budget for the right kind of personnel to tackle security. There are not that many individuals out there at the moment with the top level kind of experience many businesses need. Salaries are a big spend, however, so make sure you bridge that gap with intelligent security solutions,” Alderton advises.

While executives pour over the security budget and decision making, it’s important to remember not to partner with many security vendors. This may seem that by having more, the business is well covered, but it is a drain on resources. A reputable security partner with a good track record may be all that’s needed.





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Highest increase in global cyberattacks in two years
Information Security News & Events
Check Point Global Research released new data on Q2 2024 cyber-attack trends, noting a 30% global increase in Q2 2024, with Africa experiencing the highest average weekly per organisation.

Read more...
Empower individuals to control their biometric data
Information Security Access Control & Identity Management Security Services & Risk Management
What if your biometrics, now embedded in devices, workplaces, and airports, promising seamless access and enhanced security, was your greatest vulnerability in a cyberattack? Cybercriminals are focusing on knowing where biometric data is stored.

Read more...
Strategies for combating insider threats
Information Security Security Services & Risk Management
In Africa, insider threats pose an increasingly significant risk to businesses, driven by economic uncertainty, labour disputes, and rapid digital transformation. These threats can arise from various sources, including disgruntled employees and compromised third-party service providers

Read more...
Five tech trends shaping business in 2025
Information Security Infrastructure
From runaway IT costs to the urgent need for comprehensive AI strategies that drive sustainable business impact, executives must be prepared to navigate a complex and evolving technology environment to extract maximum value from their investments.

Read more...
Kaspersky’s predictions for 2025 APT landscape
Information Security
The 2025 advanced persistent threat (APT) includes the rise of hacktivist alliances, increased use of AI-powered tools by state-affiliated actors – often with embedded backdoor – more supply chain attacks on open-source projects.

Read more...
SecurityHQ certified B-BBEE Level 1: Delivering global services from a local entity
SecurityHQ Information Security
SecurityHQ, a global managed security services provider (MSSP) with an office in South Africa, has announced it can now offer local companies a complete managed cybersecurity service from a Level-1 B-BBEE accredited and 51% black-owned service provider.

Read more...
2024, the year of Fraud-as-a-Service
Information Security
A report from AU10TIX outlines how ‘the industry’s dark engine’ offers user-friendly fraud kits that enable amateurs to execute complex attacks against thousands of accounts in minutes.

Read more...
The future of endpoint security
Information Security
Endpoint security is a critical pillar of cybersecurity, especially for South African businesses, which are becoming prime targets for cybercriminals. Endpoint security involves safeguarding devices connected to a network from a range of cyberthreats.

Read more...
Not enough businesses take cybercrime seriously
Information Security
Interpol recently revealed that cybercrime, specifically ransomware incidents, cost the South African economy up to 1% of the country’s GDP, while the Council for Scientific and Industrial Research estimated the loss at R2,2 billion a year.

Read more...
Navigating today’s cloud security challenges
Information Security Infrastructure
While the cloud certainly enables enterprises to quickly adapt to today’s evolving demands, it also introduces unique challenges that security teams must recognise and manage. Vincent Hwang offers insights from the 2025 State of Cloud Security Report.

Read more...