A survey of 270 IT professionals at the Infosecurity Europe 2017 conference found that customer-facing web applications were viewed as presenting the most security risk. Over three-quarters of respondents had an incident response plan, while 41% saw a lack of skilled security personnel as the biggest challenge. The document provides details on risks, security programs, and attacks experienced by organizations according to the survey responses.

1. © 2017 Synopsys, Inc. 1 Confidential - Do not distribute
New Synopsys research uncovers security’s
biggest challenges
Infosecurity Europe 2017 Survey Results

2. © 2017 Synopsys, Inc. 2 Confidential - Do not distribute
Survey Overview
Conducted June 6-8, 2017 in London at Infosecurity Europe 2017—Europe’s largest security-
focused conference.
A total of 270 IT professionals, managers, and executives participated in the in-person survey.

3. © 2017 Synopsys, Inc. 3 Confidential - Do not distribute
InfoSec Europe 2017 Survey Highlights
• Nearly ½ (48%) of respondents viewed customer-facing web applications as the area presenting
the most security risk to businesses
–23% identified mobile apps
–18% suggested desktop applications
• Over ¾ (84%) of respondents have a strategy in place in the event of a security incident
– 12% said they didn’t
– 4% suggested they didn’t know
This is particularly reassuring as the increased frequency and severity of cyberattacks is expected to continue to rise.

4. © 2017 Synopsys, Inc. 4 Confidential - Do not distribute
InfoSec Europe 2017 Survey Highlights
• 54% of those surveyed said that ‘protecting customer data’ within these applications represents
the top security concern
• Aside from the technical challenges in securing customer-facing web applications, 41% of those
surveyed felt that a lack of skilled security personnel or training was the biggest challenge,
reflective of the cybersecurity skills gap across the globe

5. © 2017 Synopsys, Inc. 5 Confidential - Do not distribute
What is the extent of application security within your organization?
37%
20%
40%
3%
Internal Software Security Group
Third-party vendors secure our
applications
Combination of 1 and 2
There is no security process in
place currently

6. © 2017 Synopsys, Inc. 6 Confidential - Do not distribute
What challenges do you face in implementing an application security
program?
41%
16%
18%
25% Lack of skilled security personnel or
training
Little to no budget
Lack of management buy-in
No challenges

7. © 2017 Synopsys, Inc. 7 Confidential - Do not distribute
Which types of applications or systems present the highest security
risk to your business?
48%
23%
18%
4%
7%
Customer-facing web applications
Mobile applications
Desktop applications
Embedded systems
Internally facing web apps

8. © 2017 Synopsys, Inc. 8 Confidential - Do not distribute
How would you rate the risk of attack to your organization?
35%
10%
46%
9%
High-risk company but with a broad,
mature security program
High-risk company with a less mature
security program
Medium risk
Low risk – too small to be a target

9. © 2017 Synopsys, Inc. 9 Confidential - Do not distribute
Has your organization been the target of a cyber attack in the last 2
years?
39%
47%
14%
Yes
No
Not Sure

10. © 2017 Synopsys, Inc. 10 Confidential - Do not distribute
Do you have an incident response plan in place to deal with a cyber
attack on your organization?
84%
12%
4%
Yes
No
Not Sure

11. © 2017 Synopsys, Inc. 11 Confidential - Do not distribute
Do you offer any cybersecurity awareness training for all employees?
64%
25%
11%
Yes, mandatory formal training
with a test
Yes, informal documented policies
No

12. © 2017 Synopsys, Inc. 12 Confidential - Do not distribute
About the Synopsys Software Integrity Platform
Synopsys offers the most comprehensive solution for building integrity—security and quality—
into the software development lifecycle and supply chain.
The Software Integrity Platform unites leading testing technologies, automated analysis, and
experts to create a robust portfolio of products and services. This portfolio enables companies to
develop customized programs for detecting and remediating defects and vulnerabilities early in
the development process, minimizing risk and maximizing productivity.
For more information, go to www.synopsys.com/software.