22
TAPA ASIA PACIFIC
SECURITY SYSTEMS CADENCE: CHANGING THE PARADIGM
For TAPA APAC members responsible for maintaining and upgrading their organisational security systems, can you address the security cadence? How often do you upgrade cadence? How often are your security systems revamped and newer plans and policies or installations put in place? What new initiatives drive the security fixes? How difficult is it to upgrade security standards in your organisation or environment? How are security challenges changing in Asia pacific?
It is not about security systems or bug fixes that matters the most, it’s really about security vulnerabilities and the support functions that matter the most when any ‘breach’ happens. For example, ransomware attacks are a form of malware that encrypts a victim’s file. The attacker then demands a ransom from the victim to restore access to the data upon payment. The victim is made more vulnerable when the victim’s data is stolen away with a purpose to publish.
Ransomware attacks seemed to explode in June 2020. Moreover, not only IT security is at risk; physical breaches, insider threats and unauthorised access under specific patterns are increasingly a part of regular security operations. Several 2020 Asia Pacific reports from security solutions providers, who surveyed more than 500 Asia Pacific executives from India, Australia, Japan, Malaysia, New Zealand, Singapore and other countries, suggested that about 30% of Asia
Role of security managers and initiatives taken
Pacific organisations admitted to having been breached last year, and 50% at some point in their history. Still, however, security initiatives and budgets are not given the kind of priority they need. Even IT security spend averages only about 10-12% of the overall IT budget. Almost 50% of all data is stored in the cloud by Asia Pacific organisations and 45% of all Asia Pacific data is cloud sensitive. The organisations also admit having at least some sensitive data in the cloud not protected by encryption.
The role of security managers in Asia has also evolved over the years from physical security to broader operations including investigations, crises management, travel security and, sometimes, even compliances. The functions of security companies have also changed from a tactical level working under the administration of facility management and focusing only on responses to a strategic level, to focusing on prevention though working independently with internal and external business partners within a corporate security framework.
Updating security is another critical function that security companies need to diligently make a case about. Software updates have almost become the norm as they include critical patches to security holes. They also improve the stability of software and remove outdated features. This makes the end user experience better, and this is more acceptable
Page 1 |
Page 2 |
Page 3 |
Page 4 |
Page 5 |
Page 6 |
Page 7 |
Page 8 |
Page 9 |
Page 10 |
Page 11 |
Page 12 |
Page 13 |
Page 14 |
Page 15 |
Page 16 |
Page 17 |
Page 18 |
Page 19 |
Page 20 |
Page 21 |
Page 22 |
Page 23 |
Page 24 |
Page 25 |
Page 26 |
Page 27 |
Page 28
