41820_hp esp fortify infographic_final

1
Do IT organizations feel prepared? IT leaders are concerned about security issues within applications. According to the Enterprise Software Security Survey 2014, however, very few companies have mature software security programs that they feel are up to the challenge. The survey of 300 IT and security decision-makers reveals 6 key findings.* Application-related security breaches are a primary concern for IT and security executives. 1 Risk is exacerbated when organizations deploy externally developed software: code that was not in their control. 2 63% use and develop custom components for large commercial applications 47% say more than one-quarter of their applications are developed externally 34% deploy a large number of third-party developed applications 23% say that more than half of their code is developed externally Despite these risks, addressing the core of the issue—the software itself—has been spotty. 3 are “very” or “critically” concerned about security issues within applications 68% are doing some penetration testing (with most testing being outsourced) 74% still rely on perimeter defenses (firewalls, encryption, virus protection, etc.) 66% Organizations face many challenges to achieving their software security goals. 4 51% cite keeping up with demand for deploying new apps 48% cite stakeholder buy-in 42% cite understanding the full risk in the portfolio Confidence in software security is generally low. 5 Senior management, however, is realizing that the security of business software and applications is a serious issue. 6 say that security professionals need to be on their game are beginning to set clear goals for business software and applications 50% * Gatepoint Research, "Enterprise Software Security StrategiesOctober 2014 Summary Results," October 2014. Boost confidence and protect your business. HP Fortify combines comprehensive testing technologies with security research to help you build a software security assurance program that meets your most pressing—and evolving—needs. Find out how HP Fortify can help you develop a more strategic approach to IT software security. Download the complete report here Read the white paper here Learn more at hp.com/go/fortifyssa 59% 52% 47% report that threats are expanding admit to feeling not particularly upbeat or generally negative

Upload: jolenedobbin

Post on 12-Apr-2017

21 views

Category:

Documents


3 download

TRANSCRIPT

Do IT organizations feel prepared?IT leaders are concerned about security issues within applications.According to the Enterprise Software Security Survey 2014, however, very few companies have maturesoftware security programs that they feel are up to the challenge.

The survey of 300 IT and security decision-makers reveals 6 key findings.*

Application-relatedsecurity breaches are aprimary concern for ITand security executives.

1 Risk is exacerbated when organizationsdeploy externally developed software:code that was not in their control.

2

63% use and develop custom componentsfor large commercial applications

47% say more than one-quarter of theirapplications are developed externally

34% deploy a large number ofthird-party developed applications

23% say that more than half oftheir code is developed externally

Despite these risks, addressing the core of theissue—the software itself—has been spotty.3

are “very” or “critically”concerned about securityissues within applications

68%

are doing some penetration testing(with most testing being outsourced)

74%

still rely on perimeter defenses(firewalls, encryption, virus protection, etc.)

66%

Organizations face many challengesto achieving their software security goals.4

51%cite keeping up with demand fordeploying new apps

48%cite stakeholder buy-in

42%cite understanding the full risk in the portfolio

Confidence in softwaresecurity is generally low.5 Senior management, however, is realizing

that the security of business software andapplications is a serious issue.

6say that security professionals needto be on their game

are beginning to set clear goalsfor business software and applications

50%

* Gatepoint Research, "Enterprise Software Security Strategies–October 2014 Summary Results," October 2014.

Boost confidence and protect your business. HP Fortify combines comprehensive testing technologies with security research to help you build a software security assurance program that meets your most pressing—and evolving—needs.

Find out how HP Fortify can help you develop a more strategic approach to IT software security.

Download the complete report here

Read the white paper hereLearn more athp.com/go/fortifyssa

59%

52%

47% report that threats are expanding

admit to feeling not particularlyupbeat or generally negative