Intelligent CISO Issue 16 | Page 19

cyber trends Having a security ‘system’ in place helps alleviate the security skills gap IT managers are facing. ransomware. A total of 41% said they suffered a data breach. Alarmingly, only 16% of IT managers consider supply chain a top security risk, exposing an additional weak spot that cybercriminals will likely add to their repertoire of attack vectors. Weak links in security increasingly lead to supply chain compromises Based on the responses, it’s not surprising that 75% of IT managers consider software exploits, unpatched vulnerabilities and/or zero-day threats as a top security risk. A total of 50% consider phishing a top security risk. www.intelligentciso.com | Issue 16 Chester Wisniewski, Principal Research Scientist, Sophos “Cybercriminals are always looking for a way into an organisation and supply chain attacks are ranking higher now on their list of methods. IT managers should prioritise supply chain as a security risk, but don’t because they consider these attacks perpetrated by nation states 19