Security News > 2021 > September > Assessing subsidiary risk a top priority for most enterprises, yet they still lack proper visibility

Most enterprises are overconfident and lack the proper visibility to manage subsidiary risk, according to an Osterman Research study.

Most organizations believe they're doing a good job managing subsidiary risk.

Ironically the majority of organizations reported they perceived they were doing a good job managing subsidiary risk, yet 67 percent of respondents said their organization had experienced a cyberattack where the attack chain included a subsidiary, or that they lacked the ability or information to rule out that possibility.

Other key findings Assessing subsidiary risk is a high priority.

47 percent regard subsidiary risk as a top 5 priority.

Two-thirds of respondents report that time to remediate a detected subsidiary risk was a week or longer on average, and sometimes up to three months.

News URL

http://feedproxy.google.com/~r/HelpNetSecurity/~3/l8XEaiynn2U/