The impact of exploitable misconfigurations on network security>
Help Net Security
Organizations stated that misconfigurations cost an average of 9% of their annual revenue but the true cost is likely to be higher. a recent report by Verizon showed that only 27.9% of global organizations maintained full compliance with PCI DSS in 2019; a decline for the third year in a row. 75% said their network security tools meant they could categorize and prioritize compliance risks âvery effectivelyâ. However, 70% report difficulties prioritizing remediation based on risk and also claim inaccurate automation as the top challenges when meeting security and compliance requirements.
96% of organizations prioritize the configuration and auditing of firewalls, but not routers or switches. Only 4% assess switches and routers as well as firewalls, which according to Zero Trust best practices, is essential when preventing lateral movement across networks. â80% of network traffic is inside the perimeter and security best practices are evolving to reflect the fact that protecting the perimeter of each network segment is important, but itâs equally important to check device security within the perimeter to mitigate insider threats from software, people, and trafficâ continued Lewis. âIf organizations want to minimize their attack surface effectively, they need to increase the cadence of risk assessments and remediation of all network devices.
Link: https://www.helpnetsecurity.com/2022/08/12/impact-exploitable-misconfigurations-network-security/