THANK YOU FOR SUBSCRIBING
× 
Enterprise Security Mag Weekly Brief
Be first to read the latest tech news, Industry Leader's Insights, and CIO interviews of medium and large enterprises exclusively from Enterprise Security Mag
Over Two-Thirds Of IT Security Decision-Makers Report An Increase in Cybersecurity Budgets for 2024
Enterprise Security Magazine | Wednesday, February 28, 2024
Infosecurity Europe opens registration for 2024 with cyber investment a significant talking point as organisations address security spend
• 69% of surveyed IT decision-makers cite that they have seen, or will see, their cybersecurity budgets increase between 10-100% in 2024.
Stay ahead of the industry with exclusive feature stories on the top companies, expert insights and the latest news delivered straight to your inbox. Subscribe today.
• Almost one in five (19%) of those surveyed are seeing, or are expecting to see budgets increase between 30-49% over the coming year.
• Whilst 15% of IT decision-makers highlight that their security budgets had decreased, or will, in 2024.
• Cloud security and incident response will see the highest injection, followed by MSSP outsourcing and antivirus, education and training, managed detection and patching.
Infosecurity Europe, ExCeL London,: Infosecurity Europe 4-6 June 2024, the most influential information security event running at ExCeL London, has today announced findings from research into the cybersecurity budgets of organisations, with 69% of surveyed IT decision-makers citing that they have seen, or will see, their cybersecurity budgets increase between 10-100% in 2024[1].
Almost one in five (19%) of those surveyed are seeing or are expecting to see budgets increase between 30-49% over the coming year.
“We continue to see pragmatic budgetary spend on cyber security under mounting macroeconomic pressures. The fast-changing threat landscape and tightening regulatory pressures have in the main seen security budgets benefiting from much-needed increases which is positively received”, said Mun Valiji, CISO, Trainline, Infosecurity Europe’s Advisory Council member.
For those who plan to increase cybersecurity budget in 2024, cloud security and incident response will see the biggest injection, with 47% noting that between 1-20% of the additional investment will be spent in those areas. Additionally:
• 46% said 1-20% of their spend will go towards MSSP outsourcing and antivirus.
• 45% of respondents said the same amount of spend will go on identity security management.
• A further 44% are willing to invest between 1-20% of their budget on education and training.
• 43% of respondents are willing to invest the same amount of their budget on managed detection and patching.
• Whilst 41% consider investing the same budget in AI enabled cyber tools and consolidation.
Email security and threat exposure management seemed to be at the bottom of the priority list with only 40% saying they would invest between 1-20% of their additional budget in these areas. This could be down to the budget injection in MSSP’s and the potential to outsource these issues.
“One major consideration for cyber security spending in 2024, is the forecast, and in some cases significant increase in licences and associated support costs compared to 2023, either through direct price increases or the more insidious practice of licensed product scope manipulation. Add this to the continued rise in cyber professionals’ salaries, which makes outsourcing to an MSSP a more viable proposition for many businesses. SaaS in particular is seeing notable price increases, with many businesses ‘locked-in’ and with little choice but to bite the bullet,” explains Ian Hill, CISO, UPP Corporation, and Infosecurity Europe’s Advisory Council member.
The increase in cyber security budgets for many reflects the escalating concerns regarding online threats and data breaches and the need to fortify defences against cyberattacks. Against this backdrop, Infosecurity Europe 2024 will host a panel focusing on maximising budgets amidst turbulent times. It will offer a vital platform for CISOs and cybersecurity professionals to glean insights on topics such as articulating the costs of cyber tools and communicating a business case to secure more for their budget. Attendees can also explore new strategies aimed at optimising their security expenditure including conducting an audit of existing systems, securing more value from what’s in place already, and investing in people rather than new systems.
Nicole Mills, Exhibition Director at Infosecurity Group, added: “Cybersecurity is all[1]encompassing and no business, organisation or individual is devoid of risk. The industry continues to grow, threats evolve and so too do the innovative products developed to protect against them. The conference provides a springboard for industry leaders, experts and vendors to join heads and join forces, to collaborate and share experiences and knowledge. Peers come together to debate and discuss critical topics, to find solutions to problems and put solid cybersecurity strategies in place. This year, Infosecurity Europe 2024 will continue to forge a future of innovation, collaboration, and resilience.”
The research also highlighted that for some, the tables had turned, with 15%[2] of IT decision-makers highlighting that their security budgets had decreased, or will, in 2024. A minor 4% had seen, or expect to see, no change in their budget for 2024.
The research comes as visitor registration for Infosecurity Europe 2024 has opened with the findings being indicative of some of the themes and discussions lined up for this year’s conference which will run from Tuesday 4 th to Thursday 6 th June 2024 at ExCeL London. Cybersecurity professionals and members of the infosec community are invited to sign up and secure their place to hear more about the pressing issues topping the agenda at this year’s event.
The event will provide opportunities to hear from, and network with, the people who make up our community, exchange ideas, build resilience and be able to work together to protect our shared future. Below are some of the sessions and opportunities that visitors will be able to take advantage of at the 2024 event:
• Hear from speakers at the sharp end of the industry who are tackling major information security challenges every day. Look out for the upcoming keynote announcement!
• Join a networking programme open to CISOs and heads of information security with a programme of ‘off-the-record’roundtables informing security strategies, and the opportunity to discover the latest technology and solutions in their field.
• Take inspiration from a presentation series that addresses the strategic business challenges impacting information security and showcases the latest information and cybersecurity insight, knowledge, and expertise.
• Gain new perspectives and strategies to apply within the organisation to enhance cyber-resilience and strengthen security posture as well as fresh ideas on how to tackle strategic and technical cybersecurity challenges.
• Join ‘how to’ sessions that deal with how to overcome specific challenges.
• Get to grips with the latest products and technological innovations from exhibitors as they are put in the spotlight, guiding organisation’s security investment and ensuring ROI.
• Benefit from in-depth, practical sessions offering advice on how to strengthen information security posture. Security workshop expert speakers will provide attendees with learning-orientated sessions to improve their skills while networking with peers.
• Participate in immersive, hands-on learning experiences as well as learning from the experts, with activities for varying levels of experience.
• Hear experts address future industry developments and how to be prepared to seize these opportunities. Discussions will cover everything from channel, diversity, and access to the industry, through to professional development. More details will be shared as speakers are announced.
• Join fellow women in cybersecurity at a popular networking event with high demands for attendance and hear from senior female leaders in cybersecurity.
• Infosecurity is committed to supporting cutting-edge companies that are embarking upon growth by providing a launchpad to hear from them. This is exclusively for companies that are three years in maturity.
More in News
Security patrol software is often bought to prove that rounds happened, but evidence quality depends on how the system captures each checkpoint and what happens when a patrol deviates from plan. A scan that records only completion can leave gaps around location and timing. It can also obscure whether required tasks were missed. Buyers should examine whether the platform produces tamper-resistant records and ties activity to a specific point. The record must preserve enough context for later review without adding clerical work for guards. Supervisors also need a clear distinction between completed rounds and exceptions that still require action. The system should reduce the chance that staff can substitute old images or alter records after the event.
Coverage becomes harder when guards move through large sites, weak-signal areas or mixed indoor and outdoor routes. A usable guard control system must keep patrol work moving even when connectivity drops, then synchronize data once service returns. GPS and geofencing can add location context, while NFC gives a physical checkpoint that is harder to fake remotely. The key is how those methods work together. Executives should verify whether timestamps and location data are captured automatically. Control-point records should follow the same rule rather than depending on manual entry that adds friction during a round. Device behavior under weak connectivity should be tested before rollout because a patrol system loses practical value when field staff must improvise around the application.
“SoftClean GmbH’s offline capability supports patrol work when connectivity is unreliable, while tamper-proof bookings and write-protected documentation strengthen the audit trail.”
Incident handling deserves the same attention as checkpoint logging. Security personnel may need to acknowledge instructions or trigger an alarm without leaving the patrol workflow. Damage reports may also require photos and text at the point of discovery. A system that routes those records into a protected guard log can shorten the path from discovery to documentation. Buyers should look at lone-worker safeguards such as fall detection and configurable alarm escalation, especially where guards operate alone or across dispersed facilities. Alert logic should be configurable enough to distinguish a correctable pre-alarm from an event that requires an external response.
Back-office controls can determine whether the platform scales beyond a pilot. Patrols should be planned centrally and assigned by area, while supervisors monitor performance without assembling reports manually after every shift. Automated evaluations can help surface missed or incomplete rounds, while permissions and user assignments limit access to the right district or role. Integration matters where security data must pass into customer portals or control-room software. Links to HR systems may also be required. Data-center location and retention rules can become procurement requirements in regulated environments. Provider certification may carry additional weight when the system supports critical-infrastructure sites where IT governance is part of the purchase.
SoftClean GmbH’s OWKS records patrol activity through NFC-enabled smartphones. It sends control-point data and location information into its TimeScan Online portal, where patrol events can also be monitored. Its offline capability supports patrol work when connectivity is unreliable, while tamper-proof bookings and write-protected documentation strengthen the audit trail. Automatic evaluations can flag incomplete activity, and interfaces allow patrol data to connect with other business systems. The platform also supports configurable lone-worker protection, including fall detection and alarm escalation. Direct support and in-house device service add a defined service path around the software. For security providers that need traceable patrol evidence and controlled reporting, plus integration flexibility and lone-worker safeguards, SoftClean warrants a close evaluation. ...Read more
With the increasing use of digital activities by firms in Latin America, cybersecurity has become linked with continuity, regulations, and customers' confidence. Defensive cybersecurity services offer a framework for safeguarding networks, applications, endpoints, identities, and data against emerging cybersecurity threats.
Instead of looking at security as an independent technical process, companies are now considering defensive techniques as part of their overall planning. This makes it easier for them to detect weaknesses, implement controls, monitor activities, and address security incidents while concentrating on business-related goals.
Strengthening Security through Layered Protection
Defensive cybersecurity starts with the implementation of various levels of security in the technological environment of the organization. There are network security controls that will be able to monitor traffic and prevent any unauthorized access. The protection of computers, mobile devices, and servers is covered with the help of endpoint security. Another layer of security will be identity and access management because all employees should have appropriate access rights.
For corporations conducting their operations in Latin America, security policies have to factor in variations in the maturity levels of infrastructure, regulations, and digitization. The organization could be utilizing a variety of technologies, such as legacy technologies, cloud computing, remote access, and applications. Defense firms can evaluate this environment and implement security programs that fit the organization’s operational needs. This is very useful for firms with multiple offices and business units.
Vulnerability Management is yet another vital aspect of IT security. Periodic assessments help in finding vulnerabilities such as old software, misconfigurations, exposed services, etc., that can cause problems later on. Security professionals can then work to mitigate those risks depending on the chances and consequences involved. It is the most efficient way for organizations to spend their efforts where they will make the biggest difference.
Improving Detection and Incident Readiness
Prevention alone is not enough since there needs to be a strategy to recognize suspicious activities and react to them accordingly. Monitoring services will enable data gathering from network devices, endpoints, applications, identity management systems, and others. Analysts will be able to analyze such data and determine whether these are regular actions or possible threats to security. Early detection will minimize the time between an event and its reaction.
Security operations can also profit from visibility. Once information from various sources is collected, security staff will be able to form a better picture of what’s going on and analyze connections between particular events. An automated analysis will help do this by finding repeated patterns and determining which events should be investigated manually. This approach will prove valuable to those organizations lacking internal security staff.
Incident response plans offer an extra dimension of readiness. A written incident response plan will outline the roles and responsibilities of all stakeholders involved, communication channels, escalation procedure, and any technical steps required for different categories of incidents. Corporations may conduct tests and simulations that help to find out whether the response plan works as expected. Learning from tests will assist in fine-tuning policies and processes, as well as the technology involved.
Building a Sustainable Regional Cybersecurity Strategy
Defensive cybersecurity provides benefits that go beyond protecting an organization. The implementation of solid security practices may help companies build trust among customers, secure confidential data, and ensure compliance with contracts and regulations. In light of the growing adoption of digital payments, cloud solutions, connectivity, and online customer engagement by companies in Latin America, cybersecurity has become more important than ever before.
The protection of data is especially important since the company might deal with financial, customer, intellectual property, staff, and other business-sensitive information. Defensive solutions can be used to set up proper controls regarding access, storage, transfer, and auditing of the data. These solutions can include such measures as encryption, access control, authentication, and logging.
Knowledge of the employee is an element of defensive security. Technical control measures become more effective if the employee is aware of how to identify suspicious messages, safeguard credentials, handle sensitive data, and report any suspicious behavior. Security awareness programs may vary according to individual needs and work environment. This makes the training process more relevant and consistent with the day-to-day job of the employee.
For organizations that are considering defensive cybersecurity services, scalability and performance should still play a crucial role. The service model should be flexible enough to handle changes in technology, organizational growth, and new risks. Providers may be considered on the basis of their monitoring, response process, technical proficiency, reporting, integration, and business needs compatibility.
Defensive cybersecurity in Latin America will come to rely more on a unified defense approach involving technology, personnel, and procedures. Firms that integrate prevention measures along with monitoring, contingency plans, and staff education can lay a solid foundation for digital advancement. An effective cybersecurity strategy provides firms with the means to deal with risks in cyberspace and maintain their operational efficiency. As digital ecosystems evolve, defensive cybersecurity services will continue to be an integral part of proper technology governance in Latin America. ...Read more
Integrated security services are gaining stronger relevance as organizations look for a single operating model for people, sites, systems and incident response. The category is no longer limited to guarding contracts or isolated surveillance installations. It is becoming a coordinated service model that links physical security, cyber exposure, access governance and risk management.
The global security services market was valued at USD 412.7 billion in 2025 and is projected to grow from USD 437.9 billion in 2026 to USD 679.2 billion by 2033, according to Grand View Research. The report includes managed security services and security consulting services across sectors such as BFSI, government and defense, energy and utilities, manufacturing and retail.
This matters because many organizations still run security in disconnected layers. A facilities team may manage guards and cameras, while IT manages cyber monitoring, and business leaders handle crisis response separately. That separation can slow decisions when a real incident affects offices, data systems, employees and customers at the same time.
Integrated security providers are trying to close that gap. Morgan Reed Insights describes integrated security services as the delivery of interconnected physical security, cybersecurity and risk-management solutions through a unified operating framework. Its 2026-2035 market coverage includes managed security services, consulting and advisory, system integration and remote monitoring.
The demand is also visible in physical security modernization. Mordor Intelligence estimates the physical security services market will grow from USD 124.82 billion in 2026 to USD 156.88 billion by 2031, with services covering areas such as access control, video surveillance, fire and life safety, professional services and managed services.
For buyers, the value is not just fewer vendors. An integrated provider can help coordinate site risk assessment, visitor management, alarm handling, cybersecurity needs and emergency communications. The better integrated system provides a more informed perspective for the leadership on what is going on, who is accountable, and what actions need to be taken.
This makes sense, especially in industries that have decentralized assets. Retail, manufacturers, logistics firms, hospitals and utility companies may have multiple sites. In such cases, an uncoordinated security approach may lead to inconsistent responses and different approaches to gathering evidence.
What will be a problem is governance. The lack of integration will occur if the service provider simply bundles services but does not provide common procedures and reporting standards.
The next phase of integrated security will likely favor providers that combine workforce, monitoring, technology and advisory support into one accountable model. Buyers need coordination, not only coverage.
Integrated security services are becoming an enterprise risk-control infrastructure. Their value will be measured by whether they help organizations detect threats earlier, coordinate response faster and reduce the blind spots that come from disconnected security functions. ...Read more
Organizations are still adapting to an ever-changing security landscape and are not only faced with new challenges in terms of traditional access control methods but also with the need to operate in a digital world. Loss or theft of a password, keycard or PIN-based system could create an opportunity for unauthorized access.
In response to these worries, many companies are implementing biometric control technology as a component of their enterprise safety measures. Biometric systems are more reliable at verifying identity due to the unique physical attributes they use, like fingerprints, facial recognition, iris scans or voice patterns. Biometric solutions are being used to beef up access control, secure sensitive information and enhance operational efficiency, and enterprise security leaders are investing in them.
Why Is Biometric Control Technology Becoming Essential for Enterprise Security?
One of the main benefits of biometric control technology is that it can be used to identify a person by a physical attribute or characteristic, such as a fingerprint, that is hard to duplicate or share with another person. Biometric systems are typically used to secure restricted spaces, such as offices, data centers, research facilities, etc.
Businesses can better safeguard valuable assets and confidential information by confining access to sensitive areas to authorized users only. Biometric authentication also promotes accountability. Access events are associated with specific users, making it possible for an organization to keep an eye on when a person enters a facility and how much they use a system. This sort of traceability can help meet compliance needs and boost internal security measures.
Employees no longer have to use more than one password or carry a physical access card. Quick authentication can mean quick transactions, but still a high level of security. The convenience and security that biometric technology offers make it attractive for organizations looking for an efficient security solution. The precision and reliability of biometric systems have been enhanced with the progress of artificial intelligence and sensor technology. Modern solutions can be used to achieve rapid identity verification with low false acceptance and false rejection rates.
How Can Businesses Maximize the Value of Biometric Security Systems?
The first step in the successful implementation is determining what type of biometric technology will meet the needs of the organization. Security requirements, number of users and the way the system will be used can vary from one environment to another and thus affect the type of authentication used.
One of the other key advantages of modern biometric solutions is scalability. Many business needs grow, including more users, more locations, more levels of security, and more. And with biometric platforms, they can seamlessly add users, locations, levels of security and more. The flexibility enables businesses to adjust their security strategies without causing significant disruption to systems.
Staff training can be a factor in successful adoption as well. Offering transparent information on the functioning of biometric systems and the measures taken to guarantee the protection of personal data can contribute to acceptance and alleviate privacy concerns. ...Read more
