- OTRS survey: Satisfaction with investments in information and cyber security among professionals 20 per cent higher YoY
- Relief and new challenges thanks to more security tools
- AI hype and regulatory pressure shape selection criteria for software solutions for information and cyber security
Cupertino, CA, December 10, 2024 – New security incidents become known every day and several new IT security regulations are on the horizon: The pressure on companies to prioritize IT security is growing. This is reflected in the resources they are investing in information and cyber security. While only 37 percent of the IT and cybersecurity specialists surveyed were satisfied with that last year, the figure in this year’s “OTRS Spotlight: Corporate Security 2024” study is 44 percent. Among those who are not satisfied, most would like to see more investment in software and security awareness training (27 percent each). This is closely followed by the desire for more funding for infrastructure (26 percent). 21 percent see a need for more personnel.
For the study, the software company OTRS Group, in collaboration with the market research company Pollfish, surveyed 476 IT and cybersecurity professionals, including 100 in the U.S.
More security tools take strain off professionals – but also bring new challenges
Parallel to satisfaction with the information and cyber security equipment, the use of various instruments in the security toolkit of professionals has also increased. SIEM (Security Information and Event Management) systems, vulnerability management tools and SOAR (Security, Orchestration, Automation and Response) software are actively used by more respondents than in the previous year (+14, +12 and +6 percent respectively). Those who already use SOAR software (58 percent) see the biggest advantages for their SOC (Security Operations Centre) being that it
- makes working with IT easier (59 percent),
- enhances the automation of their incident response processes (53 percent) and
- improves incident tracking and reporting (52 percent).
However, the increasing number of software solutions and tools in use is not just a relief for security teams. Managing and maintaining them brings its own challenges: Above all, respondents complain about tool complexity (46 percent) and integration difficulties (45 percent). Training requirements that new tools involve as well as ensuring clean data are also seen as major challenges when managing multiple tools by many (37 percent). Despite all this, more than three quarters (78 percent) are either satisfied or very satisfied with the integration and interoperability of their current security tools.
Software selection influenced by AI trend and regulatory pressure
When selecting new software solutions for information and cyber security, respondents appear to feel the effects of the ongoing trend towards artificial intelligence on the one hand and the pressure from upcoming regulations, such as NIS-2 or DORA, on the other. Integrated AI functionalities as well as compliance and security functions share first place in their top five selection criteria with 47 percent each. Timely security updates and patches as well as functionality are among the top 5 decision criteria for 44 percent each. Costs, on the other hand, are only among the most important criteria for a third of respondents (33 percent), and on-premise availability for just 17 percent.
Jens Bothe, Vice President lnformation Security of OTRS Group, summarizes: “The fact that more and more decision-makers are recognizing the economic importance and value of IT security and equipping their teams with the appropriate resources is a very welcome, albeit long overdue, development.
However, the survey results also clearly show the obstacles on the way to a higher level of security in companies. On the one hand, by no means all organizations prioritize IT security high enough. In many places, there is still a lack of financial and human resources.
Secondly, software solutions for security teams must not only become easier to use and integrate, but also increasingly support in fulfilling regulatory requirements as well as accelerating and automating processes and measures, for example through AI functionalities. If all these factors are met, security teams have a real chance of protecting their organization from major damage caused by the omnipresent threats and vulnerabilities.”
###
About the Survey “OTRS Spotlight: Corporate Security 2024”
The data used is based on an online survey conducted by Pollfish Inc. on behalf of OTRS AG, in which 476 IT and cyber security professionals in the U.S., Germany, Brazil, Mexico, Australia and Malaysia participated between August 22 and September 17, 2024.
Additional results from the third part of the survey can be found in the infographic, which is available for download here.
Results from the first two parts of the survey can be found here:
- Part 1: CrowdStrike Incident Has Shaken Companies Awake: 93 Percent Increased Security Precautions Afterwards
- Part 2: Companies Lack Important Resources for Information and Device Security
About OTRS Group
OTRS Group is the manufacturer and the world’s largest provider of the enterprise service management suite OTRS. It offers companies industry-independent software solutions for structured communication in customer service, IT service management and security management. In addition to the core product OTRS, the security solution STORM ensures efficient cybersecurity incident management and transparent documentation in accordance with standards such as ISO 27001.
Among its customers are Lufthansa, Porsche, BSI (Federal Office for Security in Information Technology), Helios Kliniken, Haribo, Bosch, and TUI Cruises. The company consists of OTRS AG and its five subsidiaries OTRS Inc. (USA), OTRS S.A. de C.V. (Mexico), OTRS Asia Pte. Ltd. (Singapore), OTRS do Brasil Soluções Ltda. (Brazil) and OTRS Magyarország Kft. (Hungary). OTRS AG is listed on the basic board of the Frankfurt Stock Exchange.
For more information, see www.otrs.com.