sb-eu logo
Story image

Fortune 500 companies failing to demonstrate cybersecurity commitment - Bitglass

03 Oct 2019

CASB company Bitglass has released findings from its latest report, The Cloudfathers: An Analysis of Cybersecurity in the Fortune 500.

To uncover whether the world’s companies are committed to enhancing their cybersecurity initiatives, Bitglass researched the members of the 2019 Fortune 500 and analysed public-facing information such as what is available on their websites.

The Cloudfathers report found that 77% of the Fortune 500 make no indication on their websites about who is responsible for their security strategy.

Additionally, 52% do not have any language on their websites about how they protect the data of customers and partners (beyond a legally required privacy notice).

The results demonstrate that most organisations lack an authentic, lasting commitment to cybersecurity, with certain industries being less security-conscious than others.

As breaches continue to cost brands millions, incite executive turnover, decrease stock prices and harm countless stakeholders, it is crucial that organisations appoint relevant leadership and prioritise proper cybersecurity.

Other Key Findings:

  • 38% of the 2019 Fortune 500 do not have a chief information security officer (CISO).
  • Of this 38%, only 16% have another executive listed as responsible for cybersecurity strategy, such as a vice president of security.
  • Of the 62% that do have a CISO, only 4% have them listed on their company leadership pages.

Most security-conscious industries in the Fortune 500:

  • The transport industry is the most security-conscious vertical, with 57% of its companies listing an executive as responsible for cybersecurity strategy. The aerospace industry (33%) and the insurance industry (30%) come in second and third, respectively.
     
  • 89% of organisations in the aerospace industry have information available on their websites about how they are protecting the data of customers and partners. Aerospace is followed by finance (72%) and technology (66%).

Least security-conscious industries in the Fortune 500:

  • No hospitality companies list an executive who is responsible for cybersecurity strategy. The manufacturing and telecommunications industries follow closely behind at 8% and 9%, respectively.
     
  • Within each of the construction, oil and gas, and hospitality industries, only 25% of organisations have information on their websites about how they protect customer and partner data.

“Corporate social responsibility initiatives have made it on to the websites of the Fortune 500, but research has shown that the same level of importance is not being given to publicly demonstrating commitment to cybersecurity initiatives,” says Bitglass chief technology officer Anurag Kahol.

“Lax security and its resulting breaches have long-term repercussions for organisations as well as their customers, shareholders, partners and other stakeholders.

“Members of the Fortune 500 should be focused just as much on protecting personal data and consumer privacy as they are on other areas of social responsibility,” he adds.

Story image
Australians ignoring cybersecurity policies in favour of productivity
Trend Micro has found that 67% of remote workers have increased their cybersecurity awareness during COVID-19 related lockdowns. However, despite greater awareness people may still engage in risky behaviour, the survey finds.More
Story image
Why DX is not complete without a transformed security architecture
Secure Access Services Edge (SASE) is the process by which core WAN edge capabilities like SD-WAN, routing, and WAN optimisation at branch locations are integrated with cloud-based security services like secure web gateways, firewall-as-a-service, cloud access security brokers, and more.More
Story image
Gartner recognises Pulse Secure for Zero Trust Network Access solution
In the market guide, Gartner states that ZTNA augments traditional VPN technologies for application access, and removes the excessive trust once required to allow employees and partners to connect and collaborate. More
Story image
Cybersecurity spending slumps - but swift recovery expected
New research from GlobalData found that the industry will recover after this initial slump to be worth almost US$238 billion by 2030.More
Story image
IT pros report increase in security issues due to remote working
Security issues, IT workloads and communication challenges have all seen significant increases in the new remote working era, according to new research from Ivanti.More
Story image
Rackspace and Cloudflare join forces for managed edge security
Rackspace and Cloudflare join forces for managed edge security The solution includes a web application firewall, DDoS protection, DNS services and a global content delivery network, backed by 24/7 support.More