A new report highlights the disconnect between security professionals’ perception of their organization’s security maturity and the effectiveness of the policies they actually implement.
Researchers from threat detection firm GoSecure developed a survey in collaboration with Serene-Risc, a knowledge mobilization network for the cybersecurity industry.
The research project looked at a series of specific security measures or controls – including multi-factor authentication, password policies, patch management, asset inventories, and endpoint visibility – and examined whether they were rated as important by respondents, as well as whether or not they were implemented.