Despite companies spending large amounts on cybersecurity, cyber threats continue to persist and thrive. Security executives are feeling the pressure, and companies are starting to question the effectiveness of their security budgets.
Cybercrime is on the rise, with deepfake scams expanding, digital fraud and theft reports increasing, and ransomware posing a threat to organizations. Despite this, experts seem to accept digital crime as a reality in today’s world.
Gerhard Swart, chief technology officer at cyber security company Performanta, believes that the cybersecurity industry has turned into one that blames victims for not investing enough in security and then sells them more products. This cycle of spending does not seem to deter criminals, as cybercrime continues to grow alongside cybersecurity investments.
The global cybersecurity market has grown significantly over the years, reaching $185.69 billion today. However, cybercrime’s impact on economies has ballooned to $9.22 trillion in 2024. This discrepancy raises questions about the effectiveness of current cybersecurity strategies.
As the market becomes more aware of security risks, there is a growing skepticism over the costs associated with cybersecurity. Business leaders are starting to question the endless cycle of spending on security products and services. This disagreement is creating a divide within the cybersecurity industry, with some advocating for a more targeted risk strategy approach.
New models such as Gartner’s Continuous Threat Exposure Management are gaining popularity among cybersecurity firms, as they focus on identifying key risks and aligning security systems accordingly. By targeting their spending on addressing specific risks, companies can effectively mitigate cyber threats without overspending on unnecessary products.
The relationship between risk and security is evolving, with clients using risk narratives to reshape their views on cybersecurity. The focus is shifting towards understanding bespoke digital risks and implementing tailored solutions to address them effectively.
Overall, the cybersecurity industry is adapting to the changing landscape of cyber threats, with a greater emphasis on targeted risk strategies and value-driven security solutions. Clients are becoming more discerning in their security investments, seeking tangible results in risk mitigation rather than simply purchasing more products and services.