All eggs in one basket? 44% of enterprises have a security team within their wider IT department

Cybersecurity is managed by a dedicated department among half (52%) of enterprises, while only 20% of companies of this size have an in-house Security Operation Center (SOC) responsible for continuous monitoring and responding to security incidents. Yet, improving internal specialists’ expertise was listed as the second most important reason to increase the IT security budget over the coming years.

Businesses, and large enterprises in particular, require skilled professionals to protect from ever-evolving cyberattacks. Combining IT and security functions within a single department can be convenient and speed up many processes to this end.

However, this approach also contradicts the segregation of duties principle, as the same people would be responsible for both day-to-day IT initiatives as well as the evaluation of corresponding security risks. Kaspersky’s recent report on IT security economics looks into this conflict of approaches and unveils what today’s typical IT security department looks like.

Respondents were asked if their companies employ highly specialized units within a cybersecurity department. In addition to SOC, 16% said that they have dedicated threat intelligence teams and 14% employ a dedicated malware analysis team.

Despite the share of such dedicated units seeming quite small, the majority of organizations are ready to mitigate this by assigning a budget to upskill their IT security staff. More broadly, 71% of all businesses expect that their investments into IT will grow in the next three years. Among them, 41% of enterprises are driven by a desire to improve internal specialists’ expertise, making it the second most common reason to increase the IT security budget.

In order to address multiple organizational setups and different priorities or strategies, Kaspersky has split its B2B offering into frameworks based on customers’ IT security maturity – Kaspersky Security Foundations, Kaspersky Optimum Security and Expert Security. The recently launched Kaspersky MDR powers each framework, enabling an instant IT security function while allowing more mature IT security teams to focus on the most critical incidents.

“The survey results show that enterprise cybersecurity departments may come in many forms. It means that their needs and requirements also vary. With our framework approach we not only help customers to protect against cyberattacks based on their current capabilities, and irrespective of business size, but we outline how they can strengthen their internal security expertise further looking forward,” comments Sergey Martsynkyan, Head of B2B Product Marketing at Kaspersky.

Kaspersky Optimum Security framework enhances security against new, unknown and evasive threats by helping medium-sized businesses and smaller enterprises with limited cybersecurity resources to build incident response. Kaspersky Expert Security framework represents a holistic strategy to help equip, inform and guide in-house experts to face the full spectrum of today’s complex threats, APT-like and targeted attacks. More information about the frameworks is available on the official web page.