Security departments are very good at outlining the best technology solutions for their companies but are less successful when it comes to aligning them with business needs, a study has found.
According to an Institute for Applied Network Security (IANS) survey, security departments scored very high in "technical excellence," but showed a need to make improvements in what IANS' survey of 1,000 respondents described as "organizational engagement."
"While technical excellence focuses on specific security products and services deployed, organizational engagement refers to the processes in place at a company for how information security aligns with the business," according to a report.
These "improvements" involve improving understanding of enterprises' specific security needs, getting management to become more involved in assessing security risks, integrating security into business processes, better communications, and running security departments more like separate business units, the report said.
Security departments have a good reputation for finding the right technology solutions, but their processes and organization need to be better integrated with the business needs of enterprises. Explore the Trend: Cybersecurity: How can we fight against new threats?