The report, based on a survey of 1,586 IT and Security professionals, found that more than half of respondents say their organizations have experienced one or more security incidents or data breaches due to a digital-certificate related compromise within the last two years.
More than a year after the historic and damaging SolarWinds attack, nearly 65% of organizations still are unable to secure and govern the growing volume of machine and application identities in the form of digital certificates, the backbone of enterprise security. This is according to the new State of Certificate Lifecycle Management in Global Organizations report from AppViewX, the leader in automated certificate lifecycle management (CLM), and the Ponemon Institute.
The report, based on a survey of 1,586 IT and Security professionals on the challenges and strategies in digital identity and access management (IAM), found that more than half of respondents say their organizations have experienced one or more security incidents or data breaches due to a digital-certificate related compromise within the last two years. According to the data:
- The root causes of security incidents include a cyberattack (57%), a certificate authority (CA) compromise (49%), or employee/third-party negligence (48%)
- Of organizations that fell victim to a data breach, nearly two-thirds (58%) of the organizations experienced severe or very severe financial consequences
- To prevent these incidents from occurring, only four in 10 organizations have an enterprise-wide security strategy for managing cryptographic keys and certificates
Gregory Webb, CEO of AppViewX , said “The fact that companies are spending such an exorbitant amount on managing and securing digital assets, yet less than 15% of respondents consider their current CLM programs to be mature, is concerning to say the least,” “With nearly half of organizations routinely experiencing security incidents from certificate expiries, it’s no longer responsible or feasible to use manual, siloed tactics and systems or legacy antiquated tools in a CLM program. Adopting a Zero Trust strategy bolstered by automation is the only cost-effective and viable way forward.”
Larry Ponemon, chairman and founder of the Ponemon Institute, said “Our research with AppViewX reveals there’s been a great awakening for a large number of organizations that recognize the importance of a CLM program, but it’s also unveiled the fact that there’s a false sense of security that leaders at these organizations are effectively capable of managing their digital certificates through current tactics,” I’m confident that CLM automation will be what helps organizations accelerate growth, enable modernization, and create scalable foundations in the future.”
Read More News: https://www.enterpriseitworld.com/news/ I Watch CIOtv: https://ciotv.live/ I Read IT Partner News: https://www.smechannels.com/
