Conclusion from a round table with 20 CISO's on 12 November in Belgium : While all organisations have installed anti-malware, anti-phishing, anti-virus SW and network monitoring, 3 out of 4 CISO’s

• believe that employees are NOT sufficiently aware of the threats they are facing
• have been able to make cybersecurity training mandatory in their organisations
• will be implementing some form of zero-trust techniques in the next 6 months
• do not have the tools to monitor user behaviour
• have seen their security budget increase (significantly) in 2020