More than one-third of organizations say they couldn't detect a cyber-attack: EY survey

Published: Tuesday, 26 January 2016 08:32

Despite the increasing threat to cybersecurity according to EY's Global Information Security Survey, more than one-third (36 percent) of organizations still don't believe they can detect sophisticated cyber-attacks. That number is lower than last year (56 percent), but still a concern as the level of sophistication in attacks continues to increase.

According to EY's survey, the two top information security threats are phishing (44 percent), and malware (43 percent).

As organizations struggle to control cybersecurity threats, these are six trends to watch in 2016, says EY:

1. Cyber threats from the interconnected world           
Approaches to cybersecurity will need to encompass the Internet.

2. Growth in digital identities
Organizations must rethink how they recognize and treat identities by establishing robust data ownership and date protection policies.

3. Hyper-regulation leading to a more complicated landscape
Organizations risk becoming so focused on complying with different requirements they won't be able to develop an overall strategic and balanced approach to cybersecurity. 

4. Criminal marketplace will become increasingly professional
Organizations should conduct a tailored threat assessment aligned to protect their most valuable data, and establish mitigation measures around vulnerabilities for access to it.

5. Traditional models for defense / defence are no longer adequate
Leading organizations need to look for ways to proactively engage their highest risk adversaries and protect critical data assets. 

6. Advanced ‘active defense’ to detect and respond to advanced cyber-attacks
By applying active defense techniques and leveraging security analytics, organizations will be able to shift the paradigm from reactive to proactive.