2022年12月16日

你应该知道的:- Imprivata，生活和任务关键行业的数字身份公司，今天发布了一项新的研究，显示超过91%的安全领导者同意他们不能再仅仅依靠外围安全来对抗和应对网络威胁，99%的人在过去一年中经历过网络攻击。-该报告概述了医疗保健、金融、制造、制药和生物技术组织如何应对网络和隐私风险。跨行业，58%的受访者表示攻击频率增加，平均为21%。此外，远程工作的兴起在很大程度上促进了攻击面的增长。随后，67%的受访者将防火墙之外的安全作为今年投资的三大重点之一。这种方法通常被称为“基于身份的”或“身份”安全，其重点是确保用户只能访问他们需要的数据和资源——这是零信任的基石。Imprivata是一家面向任务和生命攸关行业的数字身份识别公司，通过保护关键数据和应用程序而不中断工作流程的解决方案，重新定义组织如何解决复杂的工作流、安全性和合规性挑战。这项研究是由Vanson Bourne代表Imprivata进行的，包括来自美国、英国、澳大利亚和德国的医疗保健、金融、制造、制药和生物技术组织的750多名IT安全领导者的见解。虽然零信任的概念并不新鲜，但是采用各种技术来促进零信任体系结构(ZTA)是不同的。“我们从这些数据中了解到，当攻击发生时，企业在减轻攻击和管理高昂成本方面承受着巨大压力。 Yet less than half have the recommended digital identity technologies in place to protect themselves,” said Wes Wright, chief technology officer at Imprivata. “Despite the widespread familiarity with Zero Trust principles, fewer than half of those surveyed have adopted the foundational technologies needed to achieve them.” Solutions like identity governance, privileged access management (PAM), vendor privileged access management (VPAM), multifactor authentication (MFA), and single sign-on(SSO) enable greater security and compliance without negatively impacting end-user workflows. The low adoption rates seen in the study may be a result of apprehension; that doing so will hinder user productivity, particularly given the sizable number (57%) who cite user-centric security as a top priority. Other key findings include: – Third-party data breaches are a leading attack vector: More organizations are leveraging vendors, partners, and contractors as essential business resources. Interestingly, 40% of those surveyed report falling victim to a third-party data breach in the last 12 months yet just 42% have deployed VPAM to manage and control third-party access. – Rising cyber insurance costs and insufficient coverage:40% of respondents cite increased cyber insurance costs as the most common negative impact following a cyberattack, adding that their premiums have risen by an average of 35% in the past year alone. Further, 48% say their policy doesn’t cover real-life scenarios. – Patient lives at risk: For healthcare organizations, the cost of a cyberattack often goes beyond monetary to affect patient care. In fact, three in ten (31%) of those surveyed report that procedures and tests have been delayed that resulted in poor outcomes.