Is there a need for consolidation for the ideal management of security solutions?

Speaking to Wise TV, Serkan Kırkkulaç, Data and Endpoint Security Manager at Yapı Kredi Technology, discussed the challenges organizations face when managing cybersecurity solutions.

This is an issue that organizations truly struggle to handle, often making decisions that could be characterized as right at times and wrong at others. It is a genuinely challenging issue that all organizations grapple with. Technologies in the security sector are diversifying, and the cybersecurity attack surface is expanding. New, robust security solutions are emerging. However, at the core of the matter, managing—and truly managing effectively—anywhere from 50 to over 100 cybersecurity solutions while contending with threats is extremely difficult. Why is it difficult? Because the shortage of skilled human resources is an unavoidable reality. Therefore, investing in the right personnel is essential to manage each technology effectively. Looking at the broader landscape of security solutions, a recent study I read indicated that a single cybersecurity professional typically manages around three security solutions. While the ideal ratio may vary from organization to organization, having a single expert manage three cybersecurity solutions—and manage them *properly*—can be a real challenge. We constantly discuss the same themes: consolidation versus the use of “best-of-breed” solutions. In this context, there are various approaches—ranging from a full “best-of-breed” strategy involving the management of numerous solutions to platformization or consolidation, where all tools are integrated into just a few solutions. If one were to ask whether there is a single “right formula” for this, frankly, I do not believe there is. The reasons lie in a combination of factors: compliance with general regulations and specific mandates applicable to the organization; the scale of internal IT resources; budget constraints; and the availability of skilled cybersecurity personnel. Given these four factors, organizations will naturally require different approaches. However, as we approach 2025, it will be critical for organizations to conduct proper assessments—evaluating the right criteria and focusing on solving the right business problems—in order to manage these aspects more effectively and efficiently in terms of costs and human resources.

The Decision-Making Process in Cybersecurity

Cybersecurity has become one of the most critical issues of our time. With the rapid advancement of technology, cyber threats are on the rise, and organizations are developing various strategies to cope with them. However, making the right decisions in this process is not always easy; organizations may make correct decisions at times, while making incorrect ones at others. In this article, we will examine the decision-making process in cybersecurity and the challenges encountered during this process.

Technological Advancements and Cybersecurity

Rapid technological progress has brought about numerous innovations in the field of cybersecurity. While new technologies offer more robust and effective security solutions, they also cause cyberattacks to become increasingly sophisticated. This situation necessitates that organizations continuously update their cybersecurity strategies.

Human Resources and Training

One of the major challenges in cybersecurity is securing a sufficient and qualified workforce. The rapid pace of technological change requires experts to constantly enhance their skills and knowledge. Therefore, organizations must provide continuous training to their employees to keep their expertise up to date.

Consolidation and Solution Selection

When selecting cybersecurity solutions, organizations evaluate both consolidation and “best-of-breed” approaches. Consolidation offers a more holistic approach by integrating various security solutions, whereas the “best-of-breed” approach aims to utilize the optimal solution for each specific area. Both approaches have their respective advantages and disadvantages. Regulations and Compliance

Organizations must take regulatory and compliance requirements into account when defining their cybersecurity strategies. Organizations operating in different sectors need to develop solutions tailored to their specific regulatory frameworks. This is essential for ensuring legal compliance while simultaneously minimizing security vulnerabilities.

Budget and Resource Management

Cybersecurity solutions often require significant financial investment. Therefore, organizations must manage their budgets effectively and utilize their resources with maximum efficiency. Sound budget management is critical to the success of cybersecurity strategies.

Future-Oriented Strategies

As we approach 2025, organizations should evaluate how to make their cybersecurity strategies more effective and cost-efficient. Developing strategies aimed at solving business challenges—based on the right criteria—will enable organizations to succeed in the cybersecurity landscape.

Summary

Cybersecurity is of critical importance to organizations, and making the right decisions is a key factor in achieving success in this field. Factors such as technological advancements, human resources, regulatory compliance, and budget management play a pivotal role in shaping cybersecurity strategies. By considering these factors, organizations should develop future-oriented strategies and implement more effective cybersecurity solutions.