Member feedback on infosec certifications, control frameworks and the most significant challenges for security risk management in 2019

1. Auckland Chapter Survey 2019

2. Summary
• 90% of respondents would be keen to a>end
online CCSP study sessions;
• Only one respondent worked for a business
cerCfied against an informaCon security
standard;
• Phishing remains the number one security
concern. IoT, Third Party Risk and Shadow IT
were new entries in the Top 10 for 2019.

3. What informaCon security cerCficaCons do
you hold?

4. • 88% of respondents hold CISSP
• 25% hold CISM and/or CISA
• CRISC and vendor cerCficaCons also popular

5. What informaCon security cerCficaCons do
you intend to study for in 2019?

6. Top 5
1. CCSP
2. Azure
3. CISSP
4. AWS
5. CRISC

7. Which standard or framework does your
business refer to, align with or seek
cerCficaCon against?

8. Top 5
88% 88%
75%
38% 38%
ISO/IEC 27001 PCI DSS NIST Cybersecurity
Framework
Center for Internet
Security CriCcal
Security Controls
(CIS CSC)
Australian Signals
Directorate
Strategies to
MiCgate Cyber
Security Incidents

9. What do you consider the most significant
challenges when it comes to informaCon
security risk management in 2019?

10. Top5
79%
64%
57%
64%
50%
73%
55% 55%
46% 46%
Phishing and spear
phishing
Cyber hygiene
basics (idenCfying
and protecCng key
assets)
Incident response
and general breach
preparedness
Cloud security Increasing
regulatory burden
(NZ Privacy Act
2019 / GDPR)
2018 2019

11. Top 10 significant challenges for 2019
1 Phishing and spear phishing (−)
2= Cyber hygiene basics (−)
2= Incident response and breach preparedness (é)
4= Cloud security (ê)
4= Increasing regulatory burden (é)
6= Internet of Things (New!)
6= Lack of qualified or experienced staff (é)
6= General resiliency - BCP/DR planning and exercising (é)
6= Third party / supply chain / vendor risk (New!)
10 Shadow IT (New!)