SANS Survey Outlines Challenges to Critical Security Controls Adoption; James Tarala Comments

SANS has released the results of a new survey that highlights the challenges organizations are facing as they move to adopt critical security controls.

The report shows that 63 percent of organizations cited insufficient staffing as barriers to their CSC transition, 54 percent attributed it to budget scarcity and 36 percent pointed to operational and security gaps, SANS said Wednesday.

“Organizations across a broad range of industries are making steady progress toward adopting, integrating and automating the CSCs,” said James Tarala, SANS analyst and author of the report.

SANS also said 90 percent of organizations have already adopted CSCs.

Of the respondents who have measured the impact of CSCs, 16 percent said they have bolstered their risk posture and 11 percent said they are able to detect attacks.

EiQ Networks, McAfee/Intel Security, Qualys and Tripwire sponsored the survey.