--- title: COVID-19 Amplifies CISOs’ Concerns about Doing More with Less description: Chief Information Security Officers (CISOs) must prepare for more than three audits on average in the next six to 12 months but struggle with insufficient resources image: https://businessinsights.bitdefender.com/hubfs/worried%20exec.jpg --- [![](https://businessinsights.bitdefender.com/hubfs/2021/09/logo-white.svg)](https://businessinsights.bitdefender.com/?hsLang=en-us) [![CONTACT AN EXPERT](https://hubspot-no-cache-eu1-prod.s3.amazonaws.com/cta/default/341979/1d8885e9-1179-49b1-a5ec-9c75f5f670dd.png)](https://hubspot-cta-redirect-eu1-prod.s3.amazonaws.com/cta/redirect/341979/1d8885e9-1179-49b1-a5ec-9c75f5f670dd) - [For Home](https://www.bitdefender.com/solutions/) - [For Business](https://www.bitdefender.com/business/) - [Resources](https://www.bitdefender.com/business/resource-library.html) - [Webinars](https://www.bitdefender.com/business/webinars.html) # [BUSINESS INSIGHTS](https://businessinsights.bitdefender.com/?hsLang=en-us) By [**Filip Truta**](https://businessinsights.bitdefender.com/author/filip-truta) / Sep 17, 2020 # COVID-19 Amplifies CISOs’ Concerns about Doing More with Less Share this [![Share on email](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/email-color.png)](mailto:?subject=Check%20out%20https://businessinsights.bitdefender.com/covid-19-amplifies-cisos-concerns-about-doing-more-with-less&utm_medium=social&utm_source=email%20&body=Check%20out%20https://businessinsights.bitdefender.com/covid-19-amplifies-cisos-concerns-about-doing-more-with-less&utm_medium=social&utm_source=email) [![Share on twitter](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/twitter-color.png)](https://twitter.com/intent/tweet?original_referer=https://businessinsights.bitdefender.com/covid-19-amplifies-cisos-concerns-about-doing-more-with-less&utm_medium=social&utm_source=twitter&url=https://businessinsights.bitdefender.com/covid-19-amplifies-cisos-concerns-about-doing-more-with-less&utm_medium=social&utm_source=twitter&source=tweetbutton&text=) [![Share on linkedin](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/linkedin-color.png)](http://www.linkedin.com/shareArticle?mini=true&url=https://businessinsights.bitdefender.com/covid-19-amplifies-cisos-concerns-about-doing-more-with-less&utm_medium=social&utm_source=linkedin) [![Share on facebook](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/facebook-color.png)](http://www.facebook.com/share.php?u=https://businessinsights.bitdefender.com/covid-19-amplifies-cisos-concerns-about-doing-more-with-less&utm_medium=social&utm_source=facebook) - Chief Information Security Officers are preparing for an average of 3.3 security compliance standard audits over the next six to 12 months - Of the CISOs working for software companies, 77% said they were preparing for SOC-2 audits - Security seniors are worried about their current resources facing upcoming audits and security compliance Chief Information Security Officers (CISOs) must prepare for more than three audits on average in the next six to 12 months but struggle with inadequate tools, limited budgets and personnel, and inefficient manual processes. Audit solutions provider Shujinko and Pulse teamed up to survey 100 North American CISOs and document the challenges facing security and compliance professionals preparing for a wave of upcoming audits. The new work procedures amid COVID-19 and the rapid migration to the cloud have CISOs struggling to do more with less – or, at best, with the same resources they had on hand before the pandemic. According to the survey results, CISOs are preparing for an average of 3.3 security compliance standard audits over the next six to 12 months. “Despite changes in the economic climate due to COVID-19, CISOs are still tasked with preparing for more than three upcoming compliance audits across multiple security frameworks (e.g., PCI, SOC 2, NIST-CSF, ISO 27001, etc.),” surveyors [said](https://www.businesswire.com/news/home/20200915005338/en/New-Research-Shows-CISOs-Struggling-to-Prepare-for-Upcoming-Security-Compliance-Audits). But that’s only the tip of the iceberg as far as compliance hurdles go. CISOs are also bracing for audits for HITRUST, HIPAA, and PCI DSS. More than half of respondents indicated they are preparing for a HITRUST audit in the next six to twelve months, while 45% are preparing for HIPAA, 43% for PCI, 41% for CCPA, and 36% for an internal audit. Of the CISOs working for software companies, 77% said they were preparing for SOC-2 audits. The SOC 2 rulebook defines how to manage customer data based on five trust service principles: security, availability, processing integrity, confidentiality, and privacy. More importantly, SOC 2 reports are unique to each organization, meaning each business must ‘design’ its own set of controls to comply with one or more of the trust principles. The survey reveals that CISOs are worried about their current resources facing upcoming audits and security compliance. “COVID-19 has amplified CISOs’ concerns about doing more with less (both people and budget) with both teams and auditors working remotely. Worries over conflicting priorities, draining available resources and ensuring that evidence is complete round out the top five CISO concerns,” surveyors said. ### Explore More Topics - [Enterprise Security (743)](https://businessinsights.bitdefender.com/topic/enterprise-security) - [Threat Research (201)](https://businessinsights.bitdefender.com/topic/threat-research) - [Cloud Security (174)](https://businessinsights.bitdefender.com/topic/cloud-security) - [SMB Security (170)](https://businessinsights.bitdefender.com/topic/smb-security) - [Ransomware (166)](https://businessinsights.bitdefender.com/topic/ransomware) - [Privacy and Data Protection (137)](https://businessinsights.bitdefender.com/topic/privacy-and-data-protection) - [Cybersecurity Awareness (134)](https://businessinsights.bitdefender.com/topic/cybersecurity-awareness) - [Endpoint Protection & Management (126)](https://businessinsights.bitdefender.com/topic/endpoint-protection-management) - [Endpoint Detection and Response (124)](https://businessinsights.bitdefender.com/topic/endpoint-detection-and-response) - [Managed Detection and Response (119)](https://businessinsights.bitdefender.com/topic/managed-detection-and-response) - [Virtualization & Data Center Security (82)](https://businessinsights.bitdefender.com/topic/virtualization-data-center-security) - [Threat Intelligence (76)](https://businessinsights.bitdefender.com/topic/threat-intelligence) - [IT Compliance & Regulations (71)](https://businessinsights.bitdefender.com/topic/it-compliance-regulations) - [Bitdefender Threat Debrief (55)](https://businessinsights.bitdefender.com/topic/bitdefender-threat-debrief) - [Managed Service Providers (53)](https://businessinsights.bitdefender.com/topic/managed-service-providers) - [#Featured (52)](https://businessinsights.bitdefender.com/topic/featured) - [Advanced Persistent Threats (46)](https://businessinsights.bitdefender.com/topic/advanced-persistent-threats) - [Events (38)](https://businessinsights.bitdefender.com/topic/events) - [Independent Testing (18)](https://businessinsights.bitdefender.com/topic/independent-testing) - [Cybersecurity Advisory Services (9)](https://businessinsights.bitdefender.com/topic/cybersecurity-advisory-services) - [Podcast (3)](https://businessinsights.bitdefender.com/topic/podcast) - [top (2)](https://businessinsights.bitdefender.com/topic/top) See all topics ### Subscribe to Blog Updates ## Read more about this topic ### [The Pandemic Replaced Complex Corporate Security Systems with Two-Bit Routers, But ISPs Can Help](https://businessinsights.bitdefender.com/the-pandemic-replaced-complex-corporate-security-systems-with-two-bit-routers-but-isps-can-help?hsLang=en-us) ### [Clouds, Containers, & Cybersecurity Skills Gap Drive Security Services Demands](https://businessinsights.bitdefender.com/clouds-containers-cybersecurity-skills-gap-drive-security-services-demands?hsLang=en-us) ### [Small Companies, Big Security Concerns](https://businessinsights.bitdefender.com/small-companies-big-security-concerns?hsLang=en-us) ![bitdefender](https://businessinsights.bitdefender.com/hs-fs/file-2685110570-png/Bitdefender-Mar2015-Theme/Images/avatar_img_footer.png) ![bitdefender](https://businessinsights.bitdefender.com/hs-fs/file-2676149282-png/Bitdefender-Mar2015-Theme/Images/logo_white_footer.png) - [![https://twitter.com/Bitdefender_Ent](https://businessinsights.bitdefender.com/hs-fs/file-2658233851-png/Bitdefender-Mar2015-Theme/Images/ft_soc_tw.png?width=33&name=ft_soc_tw.png)](https://twitter.com/Bitdefender_Ent) - [![Linkedin-icon-300x300](https://businessinsights.bitdefender.com/hs-fs/hubfs/Bitdefender-Mar2015-Theme/Images/Linkedin-icon-300x300.png?width=33&name=Linkedin-icon-300x300.png)](https://www.linkedin.com/company/bitdefender-gravityzone-enterprise-security) - [![](https://businessinsights.bitdefender.com/hs-fs/file-2676149307-png/Bitdefender-Mar2015-Theme/Images/ft_soc_yt.png)](https://www.youtube.com/user/BitdefenderSecurity) - [Legal Terms](https://www.bitdefender.com/legal/) - [Privacy Policy](https://www.bitdefender.com/site/view/legal-privacy-policy-for-bitdefender-websites.html) - [EULA](https://www.bitdefender.com/site/view/legal-eula.html) - [Contact Us](https://www.bitdefender.com/business/contact.html) Copyright © 1997-2023 Bitdefender All rights reserved. ![](https://px.spiceworks.com/px/5rec) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Filip Truta", "url" : "https://businessinsights.bitdefender.com/author/filip-truta" }, "dateModified" : "2020-10-05T08:29:59.556Z", "datePublished" : "2020-09-17T09:14:55.000Z", "headline" : "COVID-19 Amplifies CISOs’ Concerns about Doing More with Less", "image" : [ "https://businessinsights.bitdefender.com/hubfs/worried%20exec.jpg" ], "mainEntityOfPage" : { "@id" : "https://businessinsights.bitdefender.com/covid-19-amplifies-cisos-concerns-about-doing-more-with-less", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://businessinsights.bitdefender.com/hubfs/Bitdefender_Logo_Transparent-2.png" }, "name" : "Bitdefender" } } ```