Seventy-Four Percent of Organizations Attribute Damaging Cyberattacks to Vulnerabilities in Technology Put in Place During the Pandemic, According to Global Industry Study

Eighty percent of security and business leaders said their organizations have more exposure to risk today as a result of remote work

Tenable®, Inc., the Cyber Exposure company, published a global industry study that revealed 74% of organizations attribute recent business-impacting* cyberattacks to vulnerabilities in technology put in place during the pandemic. The data is drawn from ‘Beyond Boundaries: The Future of Cybersecurity in the New World of Work,’ a commissioned study of more than 1,300 security leaders, business executives and remote employees conducted by Forrester Consulting on behalf of Tenable. 

From cloud services and applications to personal devices and remote access tools, the corporate attack surface exploded in record time. Difficulty managing the plethora of technologies has made enterprises more vulnerable and propelled cyberattacks. Moreover, 80% of security and business leaders said their organizations are more exposed to risk as a result of remote work. This exposure was largely driven by three factors: 

• Enabling a workforce without boundaries: Over half of remote workers access customer data using a personal device, yet 71% of security leaders lack high or complete visibility into remote employee home networks. This gap is well understood by bad actors, as reflected in the fact that 67% percent of business-impacting cyberattacks targeted remote employees.
• Expanding the software supply chain: 65% of security and business leaders attribute recent cyberattacks to a third-party software compromise; 61% report increased risk due to their expanded software supply chain.
• Migrating to the cloud: 80% of security and business leaders believe moving business-critical functions to the cloud elevated their risk; 62% of organizations suffered business-impacting attacks involving cloud assets. 

“Remote and hybrid work strategies are here to stay and so will the risks they introduce unless organizations get a handle on what their new attack surface looks like,” said Amit Yoran, CEO, Tenable. “This study reveals two paths forward — one riddled with unmanaged risk and unrelenting cyberattacks and another that accelerates business productivity and operations in a secure way. CISOs and CEOs have the opportunity and responsibility to securely harness the power of technology and manage cyber risk for the new world of work.”

Hybrid work models and a digital-first economy have brought cybersecurity front and center as a critical investment that can make or break short- and long-term business strategies. To address this demand, two thirds or more of security leaders plan to increase their cybersecurity investments over the next 12 to 24 months, with roughly three-quarters planning to spend more on vulnerability management and cloud security. What’s more, understanding the profound risks created by talent shortages, 64% of leaders lacking staff plan to invest within by increasing their teams’ headcount over the next 12 months. 

To read the full study, visit https://www.tenable.com/analyst-research/forrester-cyber-risk-report-2021.

Note to Editors:

• Forrester Consulting conducted an online survey of 426 security leaders, 422 business executives, and 479 remote workers (i.e., full-time employees working three or more days from home), as well as six telephonic interviews with business and security executives, to explore shifts in cybersecurity strategies at large enterprises made in response to the pandemic. The study was fielded in Australia, Brazil, France, Germany, India, Japan, Mexico, Saudi Arabia, the U.K. and the U.S. in April 2021.
• *“Business-impacting” relates to a cyberattack or compromise that results in one or more of the following outcomes: a loss of customer, employee, or other confidential data; interruption of day-to-day operations; ransomware payout; financial loss or theft; and/or theft of intellectual property.

About Tenable

Tenable®, Inc. is the Cyber Exposure company. Over 30,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. As the creator of Nessus®, Tenable extended its expertise in vulnerabilities to deliver the world’s first platform to see and secure any digital asset on any computing platform. Tenable customers include more than 50 percent of the Fortune 500, more than 30 percent of the Global 2000 and large government agencies. Learn more at www.tenable.com.

Contact Information:

Cayla Baker-Ruiz
Tenable
[email protected]
443-545-2102, x 1544