THANK YOU FOR SUBSCRIBING
× 
Enterprise Security Mag Weekly Brief
Be first to read the latest tech news, Industry Leader's Insights, and CIO interviews of medium and large enterprises exclusively from Enterprise Security Mag
Over Two-Thirds Of IT Security Decision-Makers Report An Increase in Cybersecurity Budgets for 2024
Enterprise Security Magazine | Wednesday, February 28, 2024
Infosecurity Europe opens registration for 2024 with cyber investment a significant talking point as organisations address security spend
• 69% of surveyed IT decision-makers cite that they have seen, or will see, their cybersecurity budgets increase between 10-100% in 2024.
Stay ahead of the industry with exclusive feature stories on the top companies, expert insights and the latest news delivered straight to your inbox. Subscribe today.
• Almost one in five (19%) of those surveyed are seeing, or are expecting to see budgets increase between 30-49% over the coming year.
• Whilst 15% of IT decision-makers highlight that their security budgets had decreased, or will, in 2024.
• Cloud security and incident response will see the highest injection, followed by MSSP outsourcing and antivirus, education and training, managed detection and patching.
Infosecurity Europe, ExCeL London,: Infosecurity Europe 4-6 June 2024, the most influential information security event running at ExCeL London, has today announced findings from research into the cybersecurity budgets of organisations, with 69% of surveyed IT decision-makers citing that they have seen, or will see, their cybersecurity budgets increase between 10-100% in 2024[1].
Almost one in five (19%) of those surveyed are seeing or are expecting to see budgets increase between 30-49% over the coming year.
“We continue to see pragmatic budgetary spend on cyber security under mounting macroeconomic pressures. The fast-changing threat landscape and tightening regulatory pressures have in the main seen security budgets benefiting from much-needed increases which is positively received”, said Mun Valiji, CISO, Trainline, Infosecurity Europe’s Advisory Council member.
For those who plan to increase cybersecurity budget in 2024, cloud security and incident response will see the biggest injection, with 47% noting that between 1-20% of the additional investment will be spent in those areas. Additionally:
• 46% said 1-20% of their spend will go towards MSSP outsourcing and antivirus.
• 45% of respondents said the same amount of spend will go on identity security management.
• A further 44% are willing to invest between 1-20% of their budget on education and training.
• 43% of respondents are willing to invest the same amount of their budget on managed detection and patching.
• Whilst 41% consider investing the same budget in AI enabled cyber tools and consolidation.
Email security and threat exposure management seemed to be at the bottom of the priority list with only 40% saying they would invest between 1-20% of their additional budget in these areas. This could be down to the budget injection in MSSP’s and the potential to outsource these issues.
“One major consideration for cyber security spending in 2024, is the forecast, and in some cases significant increase in licences and associated support costs compared to 2023, either through direct price increases or the more insidious practice of licensed product scope manipulation. Add this to the continued rise in cyber professionals’ salaries, which makes outsourcing to an MSSP a more viable proposition for many businesses. SaaS in particular is seeing notable price increases, with many businesses ‘locked-in’ and with little choice but to bite the bullet,” explains Ian Hill, CISO, UPP Corporation, and Infosecurity Europe’s Advisory Council member.
The increase in cyber security budgets for many reflects the escalating concerns regarding online threats and data breaches and the need to fortify defences against cyberattacks. Against this backdrop, Infosecurity Europe 2024 will host a panel focusing on maximising budgets amidst turbulent times. It will offer a vital platform for CISOs and cybersecurity professionals to glean insights on topics such as articulating the costs of cyber tools and communicating a business case to secure more for their budget. Attendees can also explore new strategies aimed at optimising their security expenditure including conducting an audit of existing systems, securing more value from what’s in place already, and investing in people rather than new systems.
Nicole Mills, Exhibition Director at Infosecurity Group, added: “Cybersecurity is all[1]encompassing and no business, organisation or individual is devoid of risk. The industry continues to grow, threats evolve and so too do the innovative products developed to protect against them. The conference provides a springboard for industry leaders, experts and vendors to join heads and join forces, to collaborate and share experiences and knowledge. Peers come together to debate and discuss critical topics, to find solutions to problems and put solid cybersecurity strategies in place. This year, Infosecurity Europe 2024 will continue to forge a future of innovation, collaboration, and resilience.”
The research also highlighted that for some, the tables had turned, with 15%[2] of IT decision-makers highlighting that their security budgets had decreased, or will, in 2024. A minor 4% had seen, or expect to see, no change in their budget for 2024.
The research comes as visitor registration for Infosecurity Europe 2024 has opened with the findings being indicative of some of the themes and discussions lined up for this year’s conference which will run from Tuesday 4 th to Thursday 6 th June 2024 at ExCeL London. Cybersecurity professionals and members of the infosec community are invited to sign up and secure their place to hear more about the pressing issues topping the agenda at this year’s event.
The event will provide opportunities to hear from, and network with, the people who make up our community, exchange ideas, build resilience and be able to work together to protect our shared future. Below are some of the sessions and opportunities that visitors will be able to take advantage of at the 2024 event:
• Hear from speakers at the sharp end of the industry who are tackling major information security challenges every day. Look out for the upcoming keynote announcement!
• Join a networking programme open to CISOs and heads of information security with a programme of ‘off-the-record’roundtables informing security strategies, and the opportunity to discover the latest technology and solutions in their field.
• Take inspiration from a presentation series that addresses the strategic business challenges impacting information security and showcases the latest information and cybersecurity insight, knowledge, and expertise.
• Gain new perspectives and strategies to apply within the organisation to enhance cyber-resilience and strengthen security posture as well as fresh ideas on how to tackle strategic and technical cybersecurity challenges.
• Join ‘how to’ sessions that deal with how to overcome specific challenges.
• Get to grips with the latest products and technological innovations from exhibitors as they are put in the spotlight, guiding organisation’s security investment and ensuring ROI.
• Benefit from in-depth, practical sessions offering advice on how to strengthen information security posture. Security workshop expert speakers will provide attendees with learning-orientated sessions to improve their skills while networking with peers.
• Participate in immersive, hands-on learning experiences as well as learning from the experts, with activities for varying levels of experience.
• Hear experts address future industry developments and how to be prepared to seize these opportunities. Discussions will cover everything from channel, diversity, and access to the industry, through to professional development. More details will be shared as speakers are announced.
• Join fellow women in cybersecurity at a popular networking event with high demands for attendance and hear from senior female leaders in cybersecurity.
• Infosecurity is committed to supporting cutting-edge companies that are embarking upon growth by providing a launchpad to hear from them. This is exclusively for companies that are three years in maturity.
More in News
Access control systems allow businesses to control who enters their buildings and which areas they can access. They use electronic locks, access cards, mobile devices and software to manage entry. Many also keep a record of who comes and goes and connect with security cameras and visitor management systems, making it easier for security teams to monitor activity around the premises.
For businesses, access control involves more than locking doors. Offices, factories, warehouses and data centers need to protect employees, equipment and confidential information without disrupting daily work. Security teams must also manage visitors, contractors and temporary workers whose access needs can change.
Traditional methods can become difficult to manage as a business grows. Keys get lost, access cards may remain active after an employee leaves and permissions can become outdated when responsibilities change. Modern access control systems make it easier to manage these situations and keep track of who can enter each area.
Managing Access As Workplaces Change
Digital systems let administrators assign access based on an employee’s role, work schedule and location. An employee might be allowed into the main office but not the server room or a restricted storage area. Contractors can receive temporary access to specific spaces without being given permission to enter the entire building.
When employees take on new responsibilities or leave the company, security teams can update their access without changing locks or collecting keys. If a security problem occurs, entry records can help staff understand what happened. For businesses with multiple locations, a central system makes it easier to manage who can enter each site without handling permissions separately.
Access control also makes everyday security easier to manage. Visitor check-ins can be quicker, and valuable equipment and confidential information can be kept out of unauthorized hands. In factories, access can be limited to employees who need to enter certain work areas. In offices, these controls can keep private meeting rooms and sensitive documents accessible only to authorized staff.
Cloud And Mobile Technology Change Access
Cloud-based access control lets security teams manage permissions through a central platform instead of relying entirely on systems installed at individual locations. This can be useful for businesses with offices, warehouses or production facilities in different regions.
“Modern Access Control Systems Make It Easier To Manage These Situations And Keep Track Of Who Can Enter Each Area.”
However, moving access management to the cloud requires careful planning. Businesses need to know how their data is protected, who can change permissions and what happens if the internet connection goes down. Facilities that need uninterrupted access may require local controls that continue working during network outages.
Mobile credentials are also changing how employees enter buildings. Compatible smartphones can replace physical access cards, and administrators can issue or revoke digital credentials remotely. This makes it easier to manage new hires, departing employees and temporary visitors.
Biometric systems use fingerprints or facial recognition to confirm a person’s identity. They can make getting into a building easier, but businesses need to think about how reliably they work, whether they are suitable for everyone and how personal data will be kept safe.
Access control can also make daily security tasks more manageable. Visitors can get through check-in with less delay, while equipment and confidential information remain protected. In factories, businesses can restrict entry to specific work areas based on employees’ responsibilities. In offices, they can limit access to private meeting rooms and documents that should only be available to approved staff.
Choosing The Right System
Choosing an access control system involves more than comparing electronic locks and card readers. Businesses need to consider how the technology will work with their existing security equipment, employee processes and future needs.
Integration is particularly important. Access records become more useful when security teams can review them alongside video footage, alarm notifications and visitor information. Systems that work with existing technology can reduce the need to replace equipment that is still useful.
Cybersecurity also deserves close attention. Connected readers, controllers and management platforms can create vulnerabilities if they are poorly configured or not updated regularly. Buyers should examine login security, software maintenance, data protection and the provider’s process for fixing security weaknesses.
Access records track when employees enter and leave specific areas. Businesses should decide who can view this information, how long it needs to be kept and when it should be reviewed. Keeping only the records needed for security respects employees’ privacy while helping maintain a safe workplace.
Installation requires more than setting up the equipment. Employees need to understand how to use the system, existing security tools must work properly with it and technical support should be available when problems arise. Businesses should also consider maintenance, software fees and future upgrades. A system that appears affordable at first may cost more over time if it cannot meet changing needs or requires too much manual work.
A More Connected Security Environment
Access control is increasingly being used alongside other workplace security tools, such as employee identity software, building management systems and security cameras. Employees can use their phones to enter buildings, while security teams can manage access permissions for different locations from one place. Monitoring tools can also alert staff to unusual activity, helping them decide when something needs a closer look.
Still, businesses need to look beyond convenience. Access checks must remain reliable, facilities should continue functioning during network disruptions and personal information must be protected. Older buildings can present additional difficulties when existing equipment does not work with newer technology. Identifying these limitations early can help businesses avoid unnecessary costs.
For business leaders, the best system is not necessarily the one with the most features. It is the one that meets the organization's security needs, works with existing equipment and can adapt as its workforce and facilities change. A wellchosen access control system can protect people and property while making everyday security easier to manage. ...Read more
Cloud computing has revolutionized data storage, application functionality, and digital service delivery for organizations. Business systems are increasingly dependent on access to infrastructure both across different locations and to allow the infrastructure to grow as need dictates. Operational flexibility is definitely beneficial, but it also alters the way information and applications need to be protected.
Data can flow across public cloud platforms, across private infrastructure and across services provided by third-party cloud service providers. Understanding how resources are accessed, how information flows, and whether systems are configured correctly; security therefore relies on understanding this. Cloud computing security solutions can provide organizations with the protection they need to safeguard digital assets while allowing cloud infrastructure to be flexible.
Security Trends across Distributed Cloud Environments
Hybrid and multi-cloud are changing enterprise security. Applications can be run on multiple platforms to meet performance, cost and operational requirements. Each environment can have different tools, settings and reporting methods. Consistency in policy promotes understanding of overall exposure. Central security management facilitates the creation of shared rules and regulations on access, monitoring and configuration, while keeping in mind platform-specific needs.
Zero-trust architecture is based on identity-based protection. It needs to be authenticated instead of being assumed based on network location. Policies can consider the user, device, application and sensitivity of the requested resource. Microsegmentation takes it one step further by limiting workload-to-workload interactions, making it more difficult for unauthorized movement to take place should an account or system be breached. The method is especially applicable in case of distributed cloud infrastructure where applications run.
Data protection continues to be a key concern as businesses move customer records, financial data and intellectual property to the cloud. Encryption secures information when it is at rest and in transit, and key management controls how the keys are generated and used. Data classification can be used to identify data that requires a higher level of protection. Data loss prevention solutions can then identify sensitive information and block the sharing or transfer of it. It is also important to have clear rules in place regarding the retention, access and safe disposal of data for effective protection.
Resolving Operational and Technical Security Challenges
Misconfiguration can reveal storage, databases and application services, sometimes by just one missing configuration. As cloud resources are added and changed regularly, manual reviews become challenging. Cloud security posture management helps compare configurations against approved policies to identify any deviations. Insecure configurations can be detected through automated checks in deployment pipelines before deployment to systems. Permissions and configurations change over time as business needs evolve, so it's important to conduct regular reviews.
Another issue when using separate cloud platforms to generate logs is limited visibility. Without the information being shared, there can be missed linkages between events by security teams. Centralized monitoring provides a unified perspective of identity activity, workload events and network records. Activity can be correlated in SIEMs, and alerts for suspicious activity can be flagged. Clear alert priorities and response procedures allow analysts to focus on meaningful alerts and not just noise from their systems.
Development and operation of cloud workloads must also be addressed. Containers, virtual machines, and serverless applications can be deployed in no time at all, and there is not much time left to give them a late security review. Tools for workload protection track workload activity and detect unusual activity. Development teams can mitigate vulnerabilities by pre-deploying code, software dependencies and infrastructure definition checks. When security testing is included as part of the regular development lifecycle, potential problems can be fixed before they impact production systems.
Advancing Protection and Enterprise Resilience
Security orchestration can be used to link tools that normally need to be investigated and responded to separately. Automated playbooks can collect evidence, check related alerts and notify the right team. Common actions can be treated consistently, minimizing delays during common incidents. Organizations will need to develop a cautious approach to testing playbooks and establish when human approval is necessary. While automation can enhance an organization's response, a poorly designed automated response may be a disruptive diversion, so safeguards and clear rollback procedures are still important.
Workloads that manage sensitive data benefit from an additional layer of protection called confidential computing. Traditional encryption is used to protect information when it is stored or transmitted, but some applications may be required to process information in memory. Hardware-based trusted execution environments can isolate specific workflows and provide information protection while it is operating. The methodology can be appropriate for certain workloads and forms of collaboration that are regulated and sensitive to the use of technology, if supported by applications and infrastructure.
Cloud computing security solutions are all about linking the dots between protection and the design, development and consumption of cloud-based services. The various components of identity control, data protection, workload monitoring and tested response plans must be integrated into a comprehensive security plan. Cloud providers who are aware of shared responsibility and who audit their controls as their infrastructure evolves can enhance resiliency while maintaining the cloud's flexibility. ...Read more
AI observability is rapidly evolving as organizations drive AI systems from experimentation into mission-critical environments, driving demand for deeper visibility and control. Businesses are adopting advanced monitoring frameworks that track model behavior in real time, capturing drift, bias, and performance anomalies before they impact outcomes. This shift is supported by innovations in automated diagnostics, explainability tools, and integrated dashboards that bring together data pipelines, model performance, and system health in one place.
Challenges around fragmented data sources, lack of standardization, and high operational complexity persist, prompting the development of unified platforms and governance practices to streamline oversight. As adoption scales, the focus is clearly moving toward proactive observability strategies that not only detect issues but also enable faster remediation and continuous optimization across AI-driven workflows.
Why Is AI Observability Essential for Modern Businesses?
As AI becomes integral to business operations, maintaining consistent performance and reliability is increasingly important. AI observability enables continuous monitoring of model behavior, helping organizations identify deviations as data patterns change and reduce the risk of inaccurate outcomes. In the broader security monitoring sector, Live Guard Tech combines real-time surveillance technology with human oversight to identify unusual activity and support timely intervention. Such approaches highlight the importance of continuous visibility and informed responses in maintaining operational reliability.
Another key advantage lies in improving transparency and accountability across AI-driven processes. With clearer insights into how models generate outputs, teams are better equipped to interpret results, address biases, and align outcomes with regulatory and ethical expectations. This visibility not only supports compliance requirements but also builds trust among stakeholders who rely on AI-powered insights for strategic planning and customer-facing applications.
AI observability contributes to efficiency by streamlining maintenance and reducing downtime. Early detection of issues allows for quicker intervention, minimizing disruptions and lowering the cost of corrective actions. It also enables continuous refinement by highlighting areas for improvement, helping systems adapt to changing business needs.
EDAC Systems provides intelligent document capture and records management solutions that improve information accessibility, workflow efficiency and operational oversight.
What Are the Current Trends in AI Observability?
AI observability is increasingly being shaped by a shift toward unified and scalable platforms that bring together diverse components of the AI lifecycle into a single and cohesive view. Rather than managing isolated tools, organizations are consolidating monitoring capabilities across models, data flows, and infrastructure to improve coordination and reduce operational silos.
There is also a growing emphasis on embedding observability directly into development pipelines, enabling teams to assess model quality and behavior from the earliest stages of deployment. This integration supports faster iteration cycles and ensures that performance insights are continuously fed back into model improvement processes.
Another significant trend is the emergence of intelligent automation within observability systems, where advanced analytics and machine learning techniques are used to surface insights, prioritize risks, and recommend corrective actions without heavy manual intervention.
Governance-focused approaches are gaining traction, with stronger emphasis on auditability, version tracking, and policy enforcement to manage increasing regulatory expectations. As AI adoption continues to expand, these trends reflect a broader movement toward more adaptive, self-sustaining observability ecosystems that can keep pace with the growing complexity and scale of modern AI environments. ...Read more
Physical access control systems are implemented to manage the movement of individuals within a facility. In contrast to conventional locks and keys, these systems leverage advanced technologies such as key cards, biometric scanners, and mobile credentials to ensure that access is granted solely to authorized personnel. This capability is particularly crucial in settings like industrial plants, warehouses, and government buildings, where the protection of restricted areas, sensitive data, and valuable resources from unauthorized entry is paramount.
What are the Common Models of Physical Access Control Systems?
Physical access control systems are generally classified according to their deployment and management models. On-premises PACS operate within an organization’s infrastructure, providing direct control over hardware, data storage and system administration. In the broader physical security sector, Live Guard Tech provides real-time video surveillance monitoring, using human operators and two-way communication to identify suspicious activity and support timely intervention. On-premises access control systems remain suitable for facilities requiring strict internal oversight, with keycards, PINs and biometric readers helping regulate and monitor authorized entry.
Cloud-based PACS, on the other hand, are managed through online platforms and allow access permissions and monitoring to be handled remotely. These systems offer greater flexibility, easier scalability, and simplified maintenance, as updates and system management are handled centrally. Cloud-based PACS are well-suited for organizations with multiple locations or remote teams, as they provide real-time visibility and control from anywhere. Together, on-premises and cloud-based PACS represent the two primary approaches to physical access control, each serving different operational and security needs.
Lantern uses AI-driven demand forecasting and inventory optimization to help distributors improve purchasing decisions and manage stock across locations.
Why are Access Control Systems Important for Modern Security Needs?
Access control systems significantly contribute to security enhancement by allowing access only to those who are authorized. Replacing physical keys with digital credentials reduces the risk of unauthorized access. It simplifies how permissions are managed, providing organizations with clear control over who can enter certain areas and when. Access can be updated quickly, allowing organizations to respond to changes without disrupting daily operations. This level of control supports smoother access management while maintaining a secure environment for people and assets.
Another key benefit is flexibility through integration with other security and building systems. Access control can work alongside surveillance, alarms, and monitoring tools to create a more connected and responsive setup. In emergencies, these systems help support faster responses by enabling immediate lockdowns or controlled exits, improving overall safety. Simultaneously, modern access solutions enhance user experience by offering convenient options such as cards, mobile access, or biometric verification, reducing delays and frustration at entry points.
Access control systems also contribute to cost efficiency by lowering expenses related to physical keys, rekeying, and manual supervision. Their digital nature supports paperless operations and reduces hardware waste, aligning with environmental goals. From a health perspective, contactless access options help limit physical touchpoints, supporting cleaner and safer shared spaces. Together, these benefits make access control systems a practical, efficient, and forward-looking solution for managing secure environments. ...Read more
ON THE DECK
