IT Involvement and Cloud Options Needed for Security Software to Work
One way to fill the gap between spend and use is to give IT a seat at the table in making software decisions, says Shaul. They should also coordinate with the network team to make sure that the security software purchased can work with the existing system.
Another solution is to turn to the cloud. If companies realize that they're throwing money out the window because they don't have the workpower to put purchases into action, they may outsource it to a third party company.
Monahan points out that the issue with not having enough IT staff to deploy software isn't really because of a lack of spending, but because of the job market. Good people can be hard to find and keep.
"We are in an employee market especially in security," he says. "So the folks that really know what's going on can be tempted away by someone else with bigger purse springs and that will torpedo a project." Working with HR to either bring in the right people or make sure who you have are paid appropriately and are happy with their jobs will help make sure that what is bought is used.
The Good News: Companies Are Dedicated to Security
The survey wasn't entirely bleak. Most organizations reported spending more per employee on security solutions, up from $80 to $115, a 44 percent increase. This means that companies are aware of security issues and dedicated to fixing it.
The survey also found that 43 percent of companies expect to go to cloud-based on managed services in 2015. This could be a boon for smaller companies, which are spending $157 per employee on security versus $73 per employee in larger companies.
"It's difficult to operate your own systems and operate them securely," Shaul says. "A cloud services provider has the manpower to operate the systems they're operating and operate them securely and effectively."
Monahan says that this could lead companies to work with vendors that offer both services on site and through the cloud. Not only does that leave the job up to the pros, but it hurdles over any retention problems. "You don't have to worry about the internal staff issue and things like that," he says.
Sign up for CIO Asia eNewsletters.