--- title: "Forrester: Cybersecurity Requires the Right Tools, Not More Tools" description: The abundance of deployed tools leads to a false sense of confidence, a Forrester study shows. image: https://businessinsights.bitdefender.com/hubfs/plumbing.jpg --- [![](https://businessinsights.bitdefender.com/hubfs/2021/09/logo-white.svg)](https://businessinsights.bitdefender.com/?hsLang=en-us) [![CONTACT AN EXPERT](https://hubspot-no-cache-eu1-prod.s3.amazonaws.com/cta/default/341979/1d8885e9-1179-49b1-a5ec-9c75f5f670dd.png)](https://hubspot-cta-redirect-eu1-prod.s3.amazonaws.com/cta/redirect/341979/1d8885e9-1179-49b1-a5ec-9c75f5f670dd) - [For Home](https://www.bitdefender.com/solutions/) - [For Business](https://www.bitdefender.com/business/) - [Resources](https://www.bitdefender.com/business/resource-library.html) - [Webinars](https://www.bitdefender.com/business/webinars.html) # [BUSINESS INSIGHTS](https://businessinsights.bitdefender.com/?hsLang=en-us) By [**Filip Truta**](https://businessinsights.bitdefender.com/author/filip-truta) / Sep 30, 2019 # Forrester: Cybersecurity Requires the Right Tools, Not More Tools Share this [![Share on email](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/email-color.png)](mailto:?subject=Check%20out%20https://businessinsights.bitdefender.com/forrester-cybersecurity-requires-the-right-tools-not-more-tools&utm_medium=social&utm_source=email%20&body=Check%20out%20https://businessinsights.bitdefender.com/forrester-cybersecurity-requires-the-right-tools-not-more-tools&utm_medium=social&utm_source=email) [![Share on twitter](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/twitter-color.png)](https://twitter.com/intent/tweet?original_referer=https://businessinsights.bitdefender.com/forrester-cybersecurity-requires-the-right-tools-not-more-tools&utm_medium=social&utm_source=twitter&url=https://businessinsights.bitdefender.com/forrester-cybersecurity-requires-the-right-tools-not-more-tools&utm_medium=social&utm_source=twitter&source=tweetbutton&text=) [![Share on linkedin](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/linkedin-color.png)](http://www.linkedin.com/shareArticle?mini=true&url=https://businessinsights.bitdefender.com/forrester-cybersecurity-requires-the-right-tools-not-more-tools&utm_medium=social&utm_source=linkedin) [![Share on facebook](https://businessinsights.bitdefender.com/hubfs/2021/07/blog/facebook-color.png)](http://www.facebook.com/share.php?u=https://businessinsights.bitdefender.com/forrester-cybersecurity-requires-the-right-tools-not-more-tools&utm_medium=social&utm_source=facebook) The disparity of technologies that enterprises use to secure their IT infrastructures don’t provide a complete, real-time view of cybersecurity risk, a Forrester survey reveals. The research also shows the abundance of deployed tools leads to a false sense of confidence. 64% of companies are making it a high priority to implement a risk framework aligning cybersecurity risk and enterprise risk, according to the survey of 250 senior security decision-makers. Most companies use multiple technologies to identify and mitigate enterprise risk, including security analytics, vulnerability management, governance, risk, and compliance (GRC), as well as vendor risk management platforms. “Increasing the number of security technologies doesn’t translate to improved security, however … The abundance of technology investments gives firms a false sense of confidence in their security posture,” the [report](https://panaseer.com/wp-content/uploads/2019/09/Forrester_-Opportunity-Snapshot-CCM.pdf) says. Almost every respondent reported challenges with existing tools, including manual reporting, an incomplete view of asset inventory and controls, and the insufficient visibility inherent to point-in-time solutions. Asked to name the technologies used to identify and understand enterprise risk, respondents said: - Security and analytics platform (83%) - Security information and event management (SIEM) technology (80%) - Vulnerability management technology (70%) - Governance, risk and compliance (GRC) platform (64%) - Vendor risk management technology (61%) - Third party risk intelligence feeds (57%) While companies report confidence in their security management efforts, their challenges paint a different picture. 86% are confident they have no gaps in the disparate security controls deployed across devices, applications, people and data. And 78% say they take a centralized approach to risk management across their organizations. “If true, this means they have a common risk taxonomy across the organization, manage technologies centrally, and aggregate and share risk data across business units,” Forrester researcher wrote. “The menagerie of disjointed technologies makes it difficult to aggregate risk data for reporting, often requiring manual effort. This, in turn, hinders them from having insight into their overall risk posture.” Researchers found gaps between the challenges companies face with cybersecurity. “In fact, challenges companies are experiencing indicate a gap in perception versus reality,” they said. Asked to name those challenges, respondents pointed to: - Controlling coverage gaps across security functions (56%) - Viewing a comprehensive list of assets across the organization (43%) - Collecting, normalizing, aggregating, deduplicating and correlating disparate data (39%) - Tracking which assets and controls do not meet regulatory and compliance policies (39%) - Determining the effectiveness of security controls (38%) - Getting a real-time view of corporate risks (37%) - Tracking performance of security controls over time (37%) Companies are therefore increasing their risk of a data breach. The report concludes that, as technology investments provide a false sense of confidence, security leaders must understand that a strong cybersecurity posture means the right tools -- not more tools. ### Explore More Topics - [Enterprise Security (743)](https://businessinsights.bitdefender.com/topic/enterprise-security) - [Threat Research (201)](https://businessinsights.bitdefender.com/topic/threat-research) - [Cloud Security (174)](https://businessinsights.bitdefender.com/topic/cloud-security) - [SMB Security (170)](https://businessinsights.bitdefender.com/topic/smb-security) - [Ransomware (166)](https://businessinsights.bitdefender.com/topic/ransomware) - [Privacy and Data Protection (137)](https://businessinsights.bitdefender.com/topic/privacy-and-data-protection) - [Cybersecurity Awareness (134)](https://businessinsights.bitdefender.com/topic/cybersecurity-awareness) - [Endpoint Protection & Management (126)](https://businessinsights.bitdefender.com/topic/endpoint-protection-management) - [Endpoint Detection and Response (124)](https://businessinsights.bitdefender.com/topic/endpoint-detection-and-response) - [Managed Detection and Response (119)](https://businessinsights.bitdefender.com/topic/managed-detection-and-response) - [Virtualization & Data Center Security (82)](https://businessinsights.bitdefender.com/topic/virtualization-data-center-security) - [Threat Intelligence (76)](https://businessinsights.bitdefender.com/topic/threat-intelligence) - [IT Compliance & Regulations (71)](https://businessinsights.bitdefender.com/topic/it-compliance-regulations) - [Bitdefender Threat Debrief (55)](https://businessinsights.bitdefender.com/topic/bitdefender-threat-debrief) - [Managed Service Providers (53)](https://businessinsights.bitdefender.com/topic/managed-service-providers) - [#Featured (52)](https://businessinsights.bitdefender.com/topic/featured) - [Advanced Persistent Threats (46)](https://businessinsights.bitdefender.com/topic/advanced-persistent-threats) - [Events (38)](https://businessinsights.bitdefender.com/topic/events) - [Independent Testing (18)](https://businessinsights.bitdefender.com/topic/independent-testing) - [Cybersecurity Advisory Services (9)](https://businessinsights.bitdefender.com/topic/cybersecurity-advisory-services) - [Podcast (3)](https://businessinsights.bitdefender.com/topic/podcast) - [top (2)](https://businessinsights.bitdefender.com/topic/top) See all topics ### Subscribe to Blog Updates ## Read more about this topic ### [Lack of Specialists, Tools, Budget and Knowledge Create Roadblocks in 2018](https://businessinsights.bitdefender.com/lack-of-specialists-tools-budget-and-knowledgelack-of-specialists-tools-budget-and-knowledge-create-roadblocks-in-2018?hsLang=en-us) ### [Building a Threat Intelligence Team: Roles, Tools, and Strategic Value](https://businessinsights.bitdefender.com/building-a-threat-intelligence-team-roles-tools-and-strategic-value?hsLang=en-us) ### [Cutting Through the Noise: How XDR Tools Reduce Dwell Time and Sharpen Frontline Response](https://businessinsights.bitdefender.com/cutting-through-the-noise-how-xdr-tools-reduce-dwell-time-and-sharpen-frontline-response?hsLang=en-us) ![bitdefender](https://businessinsights.bitdefender.com/hs-fs/file-2685110570-png/Bitdefender-Mar2015-Theme/Images/avatar_img_footer.png) ![bitdefender](https://businessinsights.bitdefender.com/hs-fs/file-2676149282-png/Bitdefender-Mar2015-Theme/Images/logo_white_footer.png) - [![https://twitter.com/Bitdefender_Ent](https://businessinsights.bitdefender.com/hs-fs/file-2658233851-png/Bitdefender-Mar2015-Theme/Images/ft_soc_tw.png?width=33&name=ft_soc_tw.png)](https://twitter.com/Bitdefender_Ent) - [![Linkedin-icon-300x300](https://businessinsights.bitdefender.com/hs-fs/hubfs/Bitdefender-Mar2015-Theme/Images/Linkedin-icon-300x300.png?width=33&name=Linkedin-icon-300x300.png)](https://www.linkedin.com/company/bitdefender-gravityzone-enterprise-security) - [![](https://businessinsights.bitdefender.com/hs-fs/file-2676149307-png/Bitdefender-Mar2015-Theme/Images/ft_soc_yt.png)](https://www.youtube.com/user/BitdefenderSecurity) - [Legal Terms](https://www.bitdefender.com/legal/) - [Privacy Policy](https://www.bitdefender.com/site/view/legal-privacy-policy-for-bitdefender-websites.html) - [EULA](https://www.bitdefender.com/site/view/legal-eula.html) - [Contact Us](https://www.bitdefender.com/business/contact.html) Copyright © 1997-2023 Bitdefender All rights reserved. ![](https://px.spiceworks.com/px/5rec) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Filip Truta", "url" : "https://businessinsights.bitdefender.com/author/filip-truta" }, "dateModified" : "2019-09-30T11:14:15.683Z", "datePublished" : "2019-09-30T11:14:15.000Z", "headline" : "Forrester: Cybersecurity Requires the Right Tools, Not More Tools", "image" : [ "https://businessinsights.bitdefender.com/hubfs/plumbing.jpg" ], "mainEntityOfPage" : { "@id" : "https://businessinsights.bitdefender.com/forrester-cybersecurity-requires-the-right-tools-not-more-tools", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://businessinsights.bitdefender.com/hubfs/Bitdefender_Logo_Transparent-2.png" }, "name" : "Bitdefender" } } ```