Security boom is over, with over a third of CISOs reporting flat or falling budgets

Security boom is over, with over a third of CISOs reporting flat or falling budgets

September 5, 2024 at 10:40AM

Chief security officers are facing challenges as security budgets lag behind and staffing growth rates slow, with over a third reporting flat or reduced spending. Despite an 8% increase in overall security spending, it’s a significant drop from previous years. Encouragingly, security’s share of the IT budget is rising, signaling a growing understanding of the need for security investments in the C-suite. Additionally, cyber insurance is booming, but careful scrutiny of terms and conditions is essential.

Based on the meeting notes, the key takeaways are:

1. Security budgets are facing challenges due to belt-tightening policies, as chief security officers report slower budget growth and some even anticipate flat or reduced spending this year.

2. Staffing levels are also affected, with over a third of security bosses admitting to not hiring, and overall staffing growth rates slowing down.

3. Retaining talent remains difficult due to a continuing talent shortage, with opportunities for growth being a crucial factor in retention.

4. Although overall security spending is up 8 percent in 2024, it has slowed down compared to previous years, with security spending as a proportion of the overall IT budget on the rise.

5. The C-suite is increasingly recognizing the need for security spending, partly influenced by SEC rule changes on reporting security incidents and concerns over corporate liability to lawsuits.

6. The recent string of third-party supplier hacks has raised concerns among board members and CISOs, leading to discussions around verifying partners and potentially hiring other organizations to check on supplier security.

7. The cyber insurance market is growing, but it’s critical to carefully review the terms and conditions of insurance contracts to ensure coverage in case of security incidents.

These clear takeaways provide a comprehensive summary of the meeting notes.

Full Article