How Optimistic Can Security Professionals Afford to Be in 2023>
Hacker One – Mahesh Chukkapali
Various research shows a sizable attack resistance gap between what companies can protect and the assets they must defend. A recent HackerOne report found only 63% of organizations’ total attack surface was estimated to be resistant to attack, and 44% of cybersecurity professionals lacked confidence in their capacity to mitigate the dangers brought on by this visibility gap. Six main factors contribute to an organization’s lack of confidence:

Incomplete Knowledge Testing Frequency is Not at Pace Scanners are limited Automation is Still Falling Short A shortage of skilled personnel is the most significant impediment for security teams. Industry giants announcing personnel cutbacks of thousands or more have been widely reported in the media 80% of firms are concerned that they do not have the skills to keep up with container and cloud-native development trends. The business impact of a breach is well documented, and the CyberEdge report reinforces the attention the board gives to avoiding one; nearly all (97%) surveyed organizations reported that their information security leaders engage board members directly. CyberEdge reports the average information security expenditure increased by 5.3% for organizations in 2023.
Link: https://www.hackerone.com/application-security/how-optimistic-can-security-professionals-afford-be-2023