{"id":4418,"date":"2021-09-23T12:00:00","date_gmt":"2021-09-23T00:00:00","guid":{"rendered":"https:\/\/ostermanresearch.com\/?post_type=jetpack-portfolio&#038;p=4418"},"modified":"2025-03-10T06:41:43","modified_gmt":"2025-03-09T17:41:43","slug":"cycognito-subsidiary-risk","status":"publish","type":"jetpack-portfolio","link":"https:\/\/ostermanresearch.com\/portfolio\/cycognito-subsidiary-risk\/","title":{"rendered":"Managing Risk from Subsidiaries: Goals, Friction, and Failure &#8211; commissioned by CyCognito"},"content":{"rendered":"\n<p><em>Commissioned by <strong>CyCognito<\/strong><\/em><\/p>\n\n\n\n<p><em>Published <em><strong>September 2021<\/strong><\/em><\/em><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Executive summary<\/h2>\n\n\n\n<p>Organizations are overconfident in their ability to manage subsidiary risk, and they continue to experience attacks involving subsidiaries. This research examines how well large companies manage risk from subsidiaries, what difficulties and constraints they encounter, and the ramifications of these. The study, commissioned by CyCognito and conducted by Osterman Research, surveyed enterprises with over $1 billion in annual revenue and an average of more than 19 subsidiaries.<\/p>\n\n\n\n<p>The research shows a perplexing disparity between what large organizations want to believe and the actual state of affairs when it comes to managing subsidiary risk. The majority of organizations reported they were doing a good job managing subsidiary risk, yet 67% of respondents said their organization had experienced a cyberattack where the attack chain included a subsidiary or that they lacked the ability or information to rule out that possibility. Even more telling, 50% of respondents reported they would not be surprised if a cyber-breach was to occur \u201ctomorrow\u201d at one of their subsidiaries.<\/p>\n\n\n\n<p>Current tools and processes for managing subsidiary risk present multiple shortfalls, including a focus on compliance at the expense of security, complex onboarding processes, infrequent and lengthy risk management processes that leave too many blind spots, an excess of manual tools, and a lag between results and remediation.<\/p>\n\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button\"><a class=\"wp-block-button__link has-white-color has-vivid-purple-background-color has-text-color has-background has-link-color wp-element-button\" href=\"https:\/\/www.cycognito.com\/news\/press-releases\/new-report-reveals-subsidiaries-are-global-enterprise-achilles-heel.php\" target=\"_blank\" rel=\"noreferrer noopener\">Download from CyCognito<\/a><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Research into how well large companies manage risk from subsidiaries, what difficulties they encounter, and the ramifications of these. Commissioned by CyCognito.<\/p>\n","protected":false},"author":384585,"featured_media":4422,"comment_status":"closed","ping_status":"closed","template":"","format":"standard","meta":{"_coblocks_attr":"","_coblocks_dimensions":"","_coblocks_responsive_height":"","_coblocks_accordion_ie_support":"","advanced_seo_description":"","jetpack_seo_html_title":"","jetpack_seo_noindex":false,"jetpack_post_was_ever_published":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"jetpack-portfolio-type":[712027439],"jetpack-portfolio-tag":[712027441],"class_list":["post-4418","jetpack-portfolio","type-jetpack-portfolio","status-publish","format-standard","has-post-thumbnail","hentry","jetpack-portfolio-type-commissioned-research","jetpack-portfolio-tag-cybersecurity"],"jetpack_publicize_connections":[],"jetpack_likes_enabled":true,"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ostermanresearch.com\/wp-json\/wp\/v2\/jetpack-portfolio\/4418","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ostermanresearch.com\/wp-json\/wp\/v2\/jetpack-portfolio"}],"about":[{"href":"https:\/\/ostermanresearch.com\/wp-json\/wp\/v2\/types\/jetpack-portfolio"}],"author":[{"embeddable":true,"href":"https:\/\/ostermanresearch.com\/wp-json\/wp\/v2\/users\/384585"}],"replies":[{"embeddable":true,"href":"https:\/\/ostermanresearch.com\/wp-json\/wp\/v2\/comments?post=4418"}],"version-history":[{"count":3,"href":"https:\/\/ostermanresearch.com\/wp-json\/wp\/v2\/jetpack-portfolio\/4418\/revisions"}],"predecessor-version":[{"id":4421,"href":"https:\/\/ostermanresearch.com\/wp-json\/wp\/v2\/jetpack-portfolio\/4418\/revisions\/4421"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ostermanresearch.com\/wp-json\/wp\/v2\/media\/4422"}],"wp:attachment":[{"href":"https:\/\/ostermanresearch.com\/wp-json\/wp\/v2\/media?parent=4418"}],"wp:term":[{"taxonomy":"jetpack-portfolio-type","embeddable":true,"href":"https:\/\/ostermanresearch.com\/wp-json\/wp\/v2\/jetpack-portfolio-type?post=4418"},{"taxonomy":"jetpack-portfolio-tag","embeddable":true,"href":"https:\/\/ostermanresearch.com\/wp-json\/wp\/v2\/jetpack-portfolio-tag?post=4418"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}