{"id":54230,"date":"2023-02-22T09:41:45","date_gmt":"2023-02-22T01:41:45","guid":{"rendered":"http:\/\/www.upgrademag.com\/web\/?p=54230"},"modified":"2023-02-22T09:41:47","modified_gmt":"2023-02-22T01:41:47","slug":"kaspersky-study-reveals-basic-cybersecurity-terms-unfamiliar-to-c-level-executives-in-sea","status":"publish","type":"post","link":"http:\/\/www.upgrademag.com\/web\/2023\/02\/22\/kaspersky-study-reveals-basic-cybersecurity-terms-unfamiliar-to-c-level-executives-in-sea\/","title":{"rendered":"Kaspersky study reveals basic cybersecurity terms unfamiliar to C-level executives in SEA"},"content":{"rendered":"\n

Every fourth business executive in Southeast Asia (SEA) prefers not to flag lack of understanding when discussing cybersecurity issues. A recent Kaspersky study also reveals one in ten C-level managers have never heard of threats such as Botnet, APT and Zero-Day exploit. The same proportion appeared to be unfamiliar with cyber security concepts like DecSecOps, ZeroTrust, SOC and Pentesting.<\/strong><\/p>\n\n\n\n

According to a PwC\u2019s study<\/a>, while backing cybersecurity in every business decision has already become the norm in every other company, more than half of executives lack confidence that their cyber spending is being allocated to the most significant risks their organization is facing. Kaspersky conducted their own research<\/a> to help IT and C-level find common ground and explore the root of their misunderstandings, where a total of 300 executives from the SEA region were surveyed.<\/p>\n\n\n\n

The Kaspersky poll indicates that C-suite sometimes struggle to understand their IT security peers and are not always ready to show their confusion. Thus, 26% of non-IT executives here say they would not feel comfortable flagging that they don’t understand something during a meeting with IT and IT security. <\/p>\n\n\n\n

Although most of them hide their confusion because they prefer to clarify everything after the meeting or choose to figure everything out by themselves, more than half (55%) don\u2019t ask additional questions because they don\u2019t believe the IT peers will be able to explain it in a clear way. Almost two-in-five also feel embarrassed revealing they don\u2019t understand the topic and 42% don\u2019t want to look ignorant in front of their IT colleagues.<\/p>\n\n\n\n

Also, even though all surveyed top-managers from SEA regularly discuss security related issues with IT security managers more than one-in-ten respondents have never heard of threats such as Zero-Day exploit (11%), Botnet (9%), and APT (9%). At the same time Spyware, Malware, Trojan and Phishing appeared to be more familiar for top-managers.<\/p>\n\n\n\n

More than one-in-ten top managers here admit they have never heard of cybersecurity terms like DecSecOps (10%), SOC (10%), Pentesting (10%), and ZeroTrust (6%). <\/p>\n\n\n\n

\u201cNon-IT top management do not have to be experts in complex cybersecurity terminology and concepts and IT security executives should keep this in mind when communicating with the board,\u201d comments Sergey Zhuykov, Solution Architect at Kaspersky. <\/p>\n\n\n\n

\u201cTo establish efficient cooperation CISO should be able to focus C-level attention precisely on meaningful details and clearly explain what exactly the company is doing to minimize cybersecurity risks. In addition to communicating clear metrics to stakeholders, this approach requires offering solutions instead of problems,\u201d says Zhuykov.<\/p>\n\n\n\n

\u201cOn the other end of the communications spectrum, only 6% of IT security professionals in SEA admit facing difficulty in discussing aspects of their work to the C-level. This means the majority of our technical workforce deem that their updates are understood by the decision makers. To bridge this dangerous gap, security teams should also incorporate effective tools \u2013 real life examples and use of reports and numbers \u2013 to ensure that discussions are done effectively,\u201d adds Chris Connell, Managing Director for Asia Pacific at Kaspersky. <\/p>\n\n\n\n

To ease the communication between IT security and business functions within the company, Kaspersky recommends the following: <\/p>\n\n\n\n