Survey: Less Than Half of IT Leaders are Confident in their IoT Security Plans

Viakoo recently released findings from its 2024 IoT Security Crisis: By the Numbers. The survey uncovers insights from IT and security executives, exposes a dramatic surge in enterprise IoT security risks, and highlights a critical missing piece in the IoT security technology stack. The clarion call is clear: IT leaders urgently need to secure their IoT infrastructure one application at a time in an automated and expeditious fashion.

Increased IoT Security Threats

IoT application and device systems are critical to the profits and operations of many organizations. As cybersecurity threats grow, IoT systems remain vulnerable due to missing pieces in enterprises' current technology stack. In surveying IT leaders across a range of organizations, it's clear that poor IoT security is causing serious issues:

  • 95% of IT leaders have an IoT security plan in place, but only 51% feel confident in their efforts.
  • 55% of IoT cyber incidents could have been prevented with better security measures.
  • 50% of IT leaders say IoT is the weakest part of their security.
  • 50% of companies have experienced an IoT cyber incident in the last 12 months, of which 44% were serious, and 22% threatened business operations.

The Right Technology Stack for IoT Security

IT leaders are focused on improving IoT security, but their current technology security stack is missing key pieces:

  • 90% of IT leaders believe that agentless security solutions are the foundation for successful IoT security.
  • 93% of IT leaders use agentless network-based asset discovery to help remediate IoT vulnerabilities, but only 35% feel they are successful with these efforts.
  • Over two-thirds (71%) of IT leaders wish they started their IoT security plans differently so they could remediate vulnerabilities faster.
  • 83% of IT leaders agree their attack surface grew one application at a time, and should be remediated one application at a time

"The IoT attack surface was built one application at a time and is growing one application at a time," said Bud Broomhead, CEO of Viakoo. "Viakoo's 2024 IoT Security Crisis: By the Numbers findings reinforce the criticality of securing IoT infrastructure one application at a time in an automated and rapid fashion."

Growing Investment, Lack of Confidence

IT professionals recognize the threat IoT presents to their business. Based on the survey results, the top emerging IoT threats for IT professionals include data breaches (69%), ransomware attacks (60%), supply chain attacks (45%), and Denial of Service (DDoS) attacks (42%).

IT leaders plan to increase spending on security stacks in the following year, but lack the knowledge and confidence to make informed decisions on filling security blind spots:

  • 87% of companies spent more on IoT security in 2023 compared to 2022.
  • 89% of companies plan to spend more on IoT security in 2024 compared to 2023.
  • Only 63% of Boards feel they have enough information on IoT security to make informed decisions.

The numbers presented here spotlight how the IoT applications and device systems that organizations rely on are vulnerable, are being attacked, and lack the focus on cybersecurity that traditional IT systems have. While there is board-level visibility into IoT security and internal discussions between the managers of IoT systems, most organizations lack the proper technology solutions, reporting, and governance to ensure that IoT systems are always visible, operational, and secure.

Download the full report here.

Featured

  • The Next Generation

    Video security technology has reached an inflection point. With advancements in cloud infrastructure and internet bandwidth, hybrid cloud solutions can now deliver new capabilities and business opportunities for security professionals and their customers. Read Now

  • Help Your Customer Protect Themselves

    In the world of IT, insider threats are on a steep upward trajectory. The cost of these threats - including negligent and malicious employees that may steal authorized users’ credentials, rose from $8.3 million in 2018 to $16.2 million in 2023. Insider threats towards physical infrastructures often bleed into the realm of cybersecurity; for instance, consider an unauthorized user breaching a physical data center and plugging in a laptop to download and steal sensitive digital information. Read Now

  • Enhanced Situation Awareness

    Did someone break into the building? Maybe it is just an employee pulling an all-nighter. Or is it an actual perpetrator? Audio analytics, available in many AI-enabled cameras, can add context to what operators see on the screen, helping them validate assumptions. If a glass-break detection alert is received moments before seeing a person on camera, the added situational awareness makes the event more actionable. Read Now

  • Transformative Advances

    Over the past decade, machine learning has enabled transformative advances in physical security technology. We have seen some amazing progress in using machine learning algorithms to train computers to assess and improve computational processes. Although such tools are helpful for security and operations, machines are still far from being capable of thinking or acting like humans. They do, however, offer unique opportunities for teams to enhance security and productivity. Read Now

Featured Cybersecurity

New Products

  • QCS7230 System-on-Chip (SoC)

    QCS7230 System-on-Chip (SoC)

    The latest Qualcomm® Vision Intelligence Platform offers next-generation smart camera IoT solutions to improve safety and security across enterprises, cities and spaces. The Vision Intelligence Platform was expanded in March 2022 with the introduction of the QCS7230 System-on-Chip (SoC), which delivers superior artificial intelligence (AI) inferencing at the edge. 3

  • AC Nio

    AC Nio

    Aiphone, a leading international manufacturer of intercom, access control, and emergency communication products, has introduced the AC Nio, its access control management software, an important addition to its new line of access control solutions. 3

  • FEP GameChanger

    FEP GameChanger

    Paige Datacom Solutions Introduces Important and Innovative Cabling Products GameChanger Cable, a proven and patented solution that significantly exceeds the reach of traditional category cable will now have a FEP/FEP construction. 3