New Baffle and EMA Research: 96% of Organizations Say Compliance Shifted Their Security Strategies
SANTA CLARA, Calif., June 22, 2022 (GLOBE NEWSWIRE) -- Baffle today released a report titled “Using Compliance Budget to Advance Security Priorities,” which details insights and trends related to compliance, security and privacy. The survey polled more than 200 technology leaders from mid- to large-size organizations across North America, representing more than 10 industry verticals.
The Baffle-sponsored research, conducted by analyst firm Enterprise Management Associates (EMA), examines the impact of the compliance budget on security strategy and priorities. It describes areas for which companies prioritize information security and compliance, which leaders control information security spending, how compliance has shifted the overall security strategy of the organization, and the solutions and tools on which organizations are focusing their technology spending.
“This study confirmed our long-standing theory that when security and compliance have a unified strategy and vision, every department and employee within the organization benefits, as does the business customer,” said Christopher M. Steffen, CISSP, CISA, managing research director of EMA. “Most organizations view compliance and compliance-related activities as “the cost of business,” something they have to do to conduct operations in certain markets. Increasingly, forward-thinking organizations are looking for ways to maximize their competitive advantage in their markets and having a best-in-class data privacy program or compliance program is something that more savvy customers are interested in, especially in organizations with a global reach. Compliance is no longer a “table stakes” proposition: comprehensive compliance programs focused on data security and privacy can be the difference in very tight markets and are often a deciding factor for organizations choosing one vendor over another.”
The findings cover three critical areas of an organization’s security and compliance posture: information security and IT audit and compliance, data security and data privacy, and security and compliance spending. Here are the top insights from each.
Information Security and IT Audit/Compliance Trends
Data Security and Data Privacy
Security and Compliance Spending
“Data responsibility is a competitive advantage. As this research with EMA reveals, companies realize that it is critical to align security and compliance resources,” said Ameesh Divatia, co-founder and CEO of Baffle. “It is gratifying to learn that IT practitioners are taking compliance very seriously, and this mindset is shaping their security strategy and investments. The environment is ideal for innovation as these practitioners evaluate tools that improve their security posture to comply with data privacy regulations. And with data privacy regulations moving compliance in lockstep with security, work done now to manage the complexity of compliance will only benefit an organization and its business customers in the long term.”