More than 90 percent of attendees at Gartner Security & Risk Management Summit say they spoke with upper management about recent attacks. Only 23 percent made any changes to their security infrastructure or took any additional steps. Insider threat wasn’t at the top of their information security priority lists. “Most CSO’s already have had to deal with law enforcement and the HR thing already,” says Tenable Network Security CEO Ron Gula. Gula: “People have a comfort with their tools even though they know something is out there””]
Source: https://www.darkreading.com/analytics/one-third-of-security-pros-not-practicing-what-they-preach