2022-10-21-SalesForce-2022年主要数据安全趋势_14页_8mb

2022 Top Data Security Trends Summary

Core Content

This document outlines the key data security trends and challenges identified by 300 North American IT leaders across various industries. The report emphasizes the importance of adapting to a distributed workforce, addressing emerging threats, and leveraging the right tools to ensure robust data security and compliance.

Main Points

1. Distributed Workforce Challenges

• 90% of IT leaders support a distributed workforce, driven by the global pandemic and accelerated digital transformation.
• Major challenges include:
  • Third-party security management (59%)
  • Compliance regulations (53%)
  • Mobile device security (49%)
• Despite these challenges, high levels of international data compliance are reported, which supports secure remote work.

2. Top Security Threats

• Phishing (545 mentions), Ransomware (413 mentions), and DOS/DDOS attacks (411 mentions) are the top three security concerns.
• Insider breaches (accidental) are a significant concern for nonregulated industries such as software, manufacturing, and professional services.
• Regulated industries (e.g., finance, healthcare) are more concerned about reputational damage and loss of trust due to the sensitivity of their data.

3. Must-Have Security Tools

• The top tools for data security include:
  • Data encryption
  • Identity and access management (IAM)
  • Multifactor authentication (MFA)
• MFA is especially critical for highly regulated industries, with 89% of finance, banking, and insurance IT leaders relying on it.
• A notable gap exists in the use of backup and restore solutions, with only 41% of IT leaders considering it a core part of their security strategy.

4. Top Data Security Tactics for 2022

• Increased vigilance against ransomware, phishing, and DOS/DDOS attacks is expected.
• Regulated industries are anticipated to face the highest risk of attacks, with 20% of respondents expecting increased complexity and volume.
• Recommended strategies include:
  • Ensuring the right security toolkit (encryption, IAM, MFA)
  • Training employees on IT security to enhance awareness
  • Prioritizing data backup and recovery solutions
  • Investing in emerging technologies like AI and machine learning for threat detection and prevention

Key Industry Insights

• Finance, banking & insurance is ranked as the highest-risk industry for cybersecurity attacks in the next 12 months.
• Healthcare follows closely, with government as the third.
• Educational services and agriculture are also at risk, though to a lesser extent.
• Nonregulated industries are more focused on accidental insider breaches, highlighting the need for internal controls and employee training.

Employee Vigilance and Training

• 84% of IT leaders are increasing employee security training.
• 68% are implementing mandatory security certifications.
• 65% are using phishing tests to improve awareness.
• Employee noncompliance tracking is also used, though less frequently (31%).

Data Recovery Gap

• 38% of IT leaders experienced a security breach in 2021.
• 57% of those could not recover any data, and only 8% could fully recover lost data.
• This underscores the critical need for robust data recovery solutions.

Research Methodology

• The study was conducted by Salesforce and Pulse, targeting North American IT executives from organizations with more than 1,000 employees.
• The survey period was from November 8 to December 15, 2021.
• The insights are based on employee feedback and expert opinions, highlighting the evolving landscape of data security.

Conclusion

The report emphasizes that in a digital-first world, organizations must balance innovation, security, and compliance. The distributed workforce and increased cyber threats require strategic investment in tools and training, with a particular focus on employee vigilance, data recovery, and emerging technologies. While regulated industries face unique risks related to reputation and trust, nonregulated industries must address internal security gaps and third-party vulnerabilities.