cyber security benchmark - Capgemini€¦ · Capgemini's free of charge international Benchmarking...
1
Several topics are covered by the Information Security Benchmark 2017: Distribution of Information Security budget Correlation between budget and security maturity Example dimension and maturity level The Information Security Benchmark 2016 has shown that the correct allocation of Information Security budgets plays an important role in achieving high security maturity To develop an effective Information Security strategy it is important to know your status quo. A benchmark based on our proven Information Security Framework helps to identify improvement areas Capgemini's free of charge international Benchmarking Study analyses your current state based on a maturity level approach Your benefits: PREVENTION 24.95% (e.g. Security Strategy, IT Risk Management, Governance, Policies, Asset Management, Awareness) PROTECTION 48.98% (e.g. Access Control, Data Security, Firewalls, Antivirus, Backup) DETECTION 14.60% (e.g. SIEM, Security Operations Center (SOC), Intrusion Detection Systems (IDS), Audit) RESPONSE AND RECOVERY 11.48% (e.g. BCM, Crisis Management Incident Management, Communication) 0 – NON-EXISTENT Not performed Non-existent Not installed Necessity not understood 4 – OPTIMIZED Continuous improvement and optimization Best practice Risk mitigation Automated workflow Business enabler Proactive 2 – DEFINED Defined process,roles, responsibilities Documented Formal Communicated 3 – MEASURED Measured to work effectively Monitored Use of KPIs Regular review/ audits Partially automated Reactive 1 – AD HOC Ad hoc As needed Informal Loosely defined Inconsistent Basic Occasional Maturity Level LOW HIGH No direct correlation between budgets and security maturity – Strategic investment into the right areas, as demonstrated by the security masters, is key. 0.0 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 0.0 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 5.5 6.0 6.5 7.0 7.5 8.0 8.5 9.0 9.5 10.0 10.5 Information Security budget as percentage of IT budget Security masters Average Average Cost-intensive security showpieces The innocent Security pretenders x = Participants overall security maturity level in relation to its Information Security budget as percentage of IT budget Maturity Level Results are differentiated by industry: Energy, Utilities & Chemicals Leading and market-listed energy and chemical companies from several countries and international utilities Financial Services Major global banks, leading insurance companies and international service providers for financial institutes Manufacturing Large market-leading manufacturers and international hidden champions with global orientation Consumer Products & Retail Global consumer product companies and major international retailers Public Sector Major federal authorities and ministries, infrastructure operators and competence centers for municipals Other Industries Leading international logistic, telco, media and car supplier companies from several countries Interactive report with high level of detail Individual results and recommendations Free of charge Cyber Security threats increase and an adequate level of Information Security is more important than ever. Is your company ready to encounter today’s and future challenges? Information Security risks and drivers Strategy and governance Organization structures and investment areas Processes and technological aspects like EU GDPR, DevOps and Cloud security … Dev Ops Information Security Benchmarking Study 2017 Register Now! Your contact Or visit our website: http://bit.ly/2m7s58Y Survey period: 20th March - 05th May Download last year's results: http://bit.ly/2m3qjZx Sebastian Hanschke Cybersecurity Consulting +49 151 4025 0133 [email protected] www.de.capgemini-consulting.com ©2017 Capgemini Consulting. 1.1 Strategy 1.5 BCM / DRM Peer Group Peer Group Company Total Avarage (All Participants) 1.2 Governance Structures 1.8 Security Incident Reporting 1.7 Data Privacy 1.3 IT Compliance Management 1.4 IT Risk Management 1.6 Audits 4 3 2 1 0 Where are you now? Where do you want to go? How is your position compared to your peer group? ... are just some of the questions answered by the Information Security Benchmark 2017
Transcript of cyber security benchmark - Capgemini€¦ · Capgemini's free of charge international Benchmarking...
Several topics are covered by the Information Security Benchmark 2017:
Distribution of Information Security budget
Correlation between budget and security maturity
Example dimension and maturity level
The Information Security Benchmark 2016 has shown that the correct allocation of Information Security budgets plays an important role in achieving high security maturity
To develop an effective Information Security strategy it is important to know your status quo. A benchmark based on our proven Information Security Framework helps to identify improvement areas
Capgemini's free of charge international Benchmarking Study analyses your current state based on a maturity level approach
Your benefits:
PREVENTION24.95%
(e.g. Security Strategy, IT Risk Management, Governance, Policies, Asset Management, Awareness)
PROTECTION48.98%
(e.g. Access Control, Data Security, Firewalls, Antivirus, Backup)
DETECTION14.60%
(e.g. SIEM, Security Operations Center (SOC), Intrusion Detection Systems (IDS), Audit)
RESPONSE AND RECOVERY
11.48%
(e.g. BCM, Crisis Management Incident Management, Communication)
0 – NON-EXISTENT
Not performedNon-existentNot installedNecessity not understood
4 – OPTIMIZED
Continuous improvement and optimizationBest practiceRisk mitigationAutomated workflowBusiness enablerProactive
2 – DEFINED
Defined process,roles,responsibilitiesDocumentedFormalCommunicated
3 – MEASURED
Measured to work effectivelyMonitoredUse of KPIsRegular review/ auditsPartially automatedReactive
1 – AD HOC
Ad hocAs neededInformalLoosely definedInconsistentBasicOccasional
Maturity Level
LOW
HIGH
No direct correlation between budgets and security maturity – Strategic investment into the right areas, as demonstrated by the security masters, is key.
0.0
0.5
1.0
1.5
2.0
2.5
3.0
3.5
4.0
0.0 0.5 1.0 1.5 2.0 2.5 3.0 3.5 4.0 4.5 5.0 5.5 6.0 6.5 7.0 7.5 8.0 8.5 9.0 9.5 10.0 10.5
Information Security budget as percentage of IT budget
Security masters
Average
Average
Cost-intensive securityshowpieces
The innocent Security pretenders
x = Participants overall security maturity level in relation to its Information Security budget as percentage of IT budget
Mat
urity
Lev
el
Results are differentiated by industry:
Energy, Utilities & ChemicalsLeading and market-listed energy and
chemical companies from several countries and international utilities
Financial ServicesMajor global banks,
leading insurance companies and international service providers
for financial institutes
ManufacturingLarge market-leading manufacturers and international hidden champions
with global orientation
Consumer Products & RetailGlobal consumer product
companies and major international retailers
Public SectorMajor federal authorities and
ministries, infrastructure operators and competence centers for municipals
Other IndustriesLeading international logistic, telco, media and car supplier companies
from several countries
Interactive report with high level of detail
Individual results and recommendations
Free of charge
Cyber Security threats increase and an adequate level of Information Security is more important than ever. Is your company ready to encounter today’s and future challenges?
Information Security risks and driversStrategy and governance Organization structures and investment areasProcesses and technological aspects like EU GDPR, DevOps and Cloud security…
Dev Ops
Information Security Benchmarking Study 2017
Register Now!
Your contact
Or visit our website:
http://bit.ly/2m7s58Y
Survey period:
20th March - 05th May
Download last year's results:
http://bit.ly/2m3qjZx
Sebastian HanschkeCybersecurity Consulting +49 151 4025 [email protected]
www.de.capgemini-consulting.com ©2017 Capgemini Consulting.
1.1 Strategy
1.5 BCM / DRM
Peer GroupPeer Group
CompanyTotal Avarage (All Participants)
1.2 Governance Structures1.8 Security Incident Reporting
1.7 Data Privacy 1.3 IT Compliance Management
1.4 IT Risk Management1.6 Audits
4
3
2
1
0
Where are you now?Where do you want to go?How is your position compared to your peer group?... are just some of the questions answered by the Information Security Benchmark 2017
