Doing more with less – Managing spend without compromising on security

A constant challenge for cybersecurity professionals is navigating resource constraints. As the threat landscape is dynamic, there is a wide range of risks and exposures that can arise, creating the need for organisations to invest in controls, technologies, processes, people, and capabilities. In truth, no organisation can ever fully resource all of its potential cybersecurity needs, and managing budgets and uplifts is a constant process of measuring alternative options and balancing priorities.

Resource issues have become more challenging in recent years as many organisations have sought to consolidate budgets and pursue cost savings across their wider operations. These approaches can leave cybersecurity teams particularly exposed and place high levels of stress on information security professionals and leaders.

This session will examine how difficult approaches can be adopted to find savings and cost efficiencies across cybersecurity workstreams, and how information security teams can become more confident that they are getting the most out of their available investments, tools, and relationships. Items that will be examined include common areas of wasted spending such as duplicated controls, purchasing approaches, and service creep.