思科：亚太地区安全弹性现状_16页_5mb

Summary of Cisco Security Resilience Report (APAC Analysis)

Introduction

This report examines security resilience based on data from 4,700 global IT and security professionals, with a focus on the Asia-Pacific region. It addresses what security resilience is, its importance, and how organizations can improve it.

What is Security Resilience?

Security resilience refers to an organization's capability to absorb, recover from, and adapt to cyber threats. It ensures business continuity by minimizing disruptions and enabling quick recovery from security events.

Why is Security Resilience Crucial?

It is vital because cyber threats are pervasive. The report shows that 97% of Asia-Pacific executives prioritize it highly, recognizing it as essential for operational stability and risk management.

Prevalence of Cyber Events

• Overall Findings: 58% of APAC organizations (including 39% in Hong Kong and 80% in Malaysia) reported experiencing major security events that impacted business operations, often in recent years.
• Country Variations: Event frequency varies significantly. For example, Malaysia has the highest rate at 80%, while Hong Kong is lowest at 39%. Common event types include DDoS attacks in Singapore and Korea, but less so in India.

Impact of Security Events

• Common Impacts: IT disruptions are the most frequent consequence. Other effects include operational losses and financial penalties. For example, in Indonesia, revenue loss was highly reported, whereas in Hong Kong and Thailand, the impact decreased.
• Factors Affecting Differences: Variations arise from regulatory pressures, geopolitical factors, business models, and varying levels of security readiness across markets.

Key Resilience Goals and Priorities

The report identifies 9 core goals for security resilience. These are prioritized differently across APAC:

• Top Priorities: Approximately 97% of executives view mitigating financial losses as key, particularly in Japan and Singapore; recruiting and retaining security talent is often low priority.
• Low Priority: Cost-effective security plans and talent acquisition are frequently ranked least important across markets.

Challenges in Implementation

• Organizations struggle with different aspects: Citing examples, companies in Australia face issues with threat containment, while those in Malaysia grapple with aligning budgets with business needs.

Measuring Overall Security Resilience

Resilience is quantified through standardized scores beyond global average (50%):

• APAC countries show disparities: Thailand excels with high scores (560), Malaysia underperforms (438).
• Technology impacts: Implementing services like XDR, Zero Trust, or SASE boosts scores considerably.

Recommendations for Improvement

Based on the data, key actions include enhancing capabilities in:

• Extending detection and response (XDR) reduces vulnerability and improves scores.
• Adopting zero trust principles increases security by leveraging multi-factor authentication and micro-segmentation.
• Deploying secure access service edge (SASE) adapts to distributed work environments, yielding higher resilience in most APAC markets.

Conclusion

To strengthen security resilience, organizations in APAC should focus on executive leadership, investment in key technologies like XDR and Zero Trust, and addressing talent shortfalls. Systematic planning and collaboration between IT and security teams are imperative for measurable improvements.