The State of
Secure Access inNorth America

Companies need to define access policies tocombat security threats

Which 5 of the following security threats have mostimpacted your organization in the past 12 months?

51%

Malware

46%

44%

43%

42%

Account fraud /Identity theft

Application
unavailability/
outageMobile or web
application
security exposure

Unauthorized
app/resource
accessMost impactful security threats by industry:
SoftwareFinancial services

Manufacturing

Healthcare

59%

54%

44%

72%

MalwareApplication
unavailability/outage

Unauthorized data
access, data leakage

Account fraud /identity theft

Which of the following security capabilities aremost important for your organization to executein order to mitigate access security threats?
Define and enforce
user and device
access policies

62%

Discover and resolve
access security
threats / incidents

52%

Define and enforce
network segmentation

51%

Enforce BYOD andguest access policy

44%

Automate DevOps /cloud app delivery

44%

Which 5 of the following security capabilities aremost challenging for your organization to executein order to mitigate access security threats/risks?
Define and enforce
user and device
access policies

57%

Define and enforcenetwork segmentation

46%

Discover and resolve
access security
threats / incidents

44%

Enforce BYOD andguest access policy

43%

Map app, data, andresource accessrequirements

41%

What’s the top threat
mitigation capability
according to each industry?

Software48%

Automate DevOps / cloud app
deliveryFinancial services

67%

Define and enforce user anddevice access policies

Manufacturing

61%

Define and enforce user anddevice access policies

Healthcare

62%

Define and enforce user anddevice access policies

To further prevent security threats, tech leaders areprioritizing Zero Trust and securing hybrid IT

In the next 12 months, to what extent will yourorganization’s existing security controls
become more aligned with Zero Trust?

43%
Moderately

34%
17%

Slightly

Significantly

4%2%Completely

Not at all

Industry by industry, who’s going to besignificantly or completely aligned with Zero Trust?

42%

17%

17%

7%

SoftwareFinancial services

Manufacturing

Healthcare

Over the next 12 months, whichaccess security initiatives are ofhighest priority for your organization?

59%

51%

Enable access
controlconsistency
across hybrid ITenvironments

48%

Automate andinvoke behaviorbased accessenforcement

Fortify networkand cloudaccess visibility
and resource
segmentation

46%

44%

Augment app
workloaddelivery andprotection (e.g.
microservices)

Improve identity
accessmanagement (IAM)
orchestration

Top security initiative priorities by industry:
SoftwareFinancial services

Manufacturing

Healthcare

48%

66%

56%

64%

Enable access control
consistency acrosshybrid IT
environments

Augment app
workload delivery andprotection(e.g. microservices)

Automate and invoke
behavior-based
access enforcement

Enable access control
consistency acrosshybrid IT environments

IT and security leaders are transitioning to clouddelivered security services, and plan toconsolidate vendors

46%
34%

How many security services has
your company transitioned tocloud delivery from traditional
on-premises security tools?

20%

<25%

26-50%>50%

In the next 18 months, to what extent do you
expect your company to increase investment
in cloud-delivered security services?

1%
76-100%

3%

6%

0%

51-75%

36%
54%

26-50%

1-25%

How likely is your organization to consolidate
separate secure access tools into a more unified
platform with fewer vendors in the next 12 months?

2%

12%

52%

29%

5%Highlyunlikely

Unlikely

LikelyHighlylikelyWe’repursuingthis now

Respondent Breakdown
Region100%
North America

Title
C-Suite35%

Company size
2-1,000
employees

DirectorVP

35%

20%

25%
Manager

1,001-5,000
employees

37%

10,001+
employees

33%

10%

5,001-10,000
employees

5%

Data collected from October 1 - November 23, 2020

Insights powered by

Respondents: 275 IT and security leaders