Enterprise Survey Highlights Ransomware, Phishing, and Workforce Shortage as Top Security Challenges
What Happened — In a 2019 interview, ESET’s Principal Product Manager Michal Jankech shared results from a survey of large enterprises. The six most‑cited security challenges were ransomware, targeted attacks, heterogeneous operating systems, insufficient network visibility, poor employee security behavior, and a shortage of skilled security staff.
Why It Matters for Trust & Control Assurance
- The mix of ransomware and phishing underscores the need for continuous security‑awareness programs that generate defensible evidence of employee training.
- Gaps in network visibility and staffing shortages make it difficult to maintain an auditable, real‑time view of asset posture—exactly the scenario a continuous control‑assurance platform is built to monitor and document.
- Heterogeneous OS environments increase the surface area for mis‑configurations, demanding a control‑mapping approach that can prove consistent protection across Windows, macOS, and Linux assets.
Who Is Affected – Large enterprises across sectors (technology, education, finance, manufacturing) that operate multi‑thousand‑employee environments.
Recommended Actions
- Map “security awareness” and “network visibility” to your audit‑readiness framework; collect training completion logs and asset‑inventory evidence.
- Prioritize hiring or augmenting security staff through managed services that provide continuous monitoring and documented remediation.
- Validate that security controls cover all operating systems in use and that configuration baselines are captured as evidence. Source: ESET interview
Technical Notes – The survey notes a shift from ransomware to phishing as the top perceived threat, reflecting attackers’ reliance on social engineering rather than novel exploits. No specific CVEs or malware families are cited. Source: same as above