Security Policy Infographic
MCLEAN, VA -- In a time where network security is critical for company survival, IT pros deal with many challenges protecting their organization’s networks. 50 percent say budget is a bottleneck to objective achievement, according to survey results released today by BAE Systems Applied Intelligence. The findings shed light on barriers preventing companies from developing and implementing comprehensive security plans.
The survey, conducted by Spiceworks, the world’s largest community of IT professionals, includes responses from 400 IT decision-makers in the United States and United Kingdom. The intention of the survey is to help understand the technology stack and behaviors that organizations are currently using, and their preferences for how to tackle their current challenges.
Time spent on policy management is critical, but resources can be reduced with new strategies
The time spent on network security is critical for both IT pros and the organizations they serve. The average IT pro spends a quarter of his or her own time just on security policy management, with around 40 percent of the team devoted to security policy management. However, budget constraints are limiting the use of new strategies, technologies and implementation practices to make this vital foundational layer more efficient; to provide greater visibility; and to manage change as a network grows.
IT decision-makers still face problems protecting their networks
Our research indicates that the greatest network security challenges facing IT professionals are:
  1. Difficulty in simulating the impact of changes
  2. Ensuring that network security policy is being implemented as intended
  3. The time taken to update policy on all required devices
With 65% of respondents facing difficulties in at least one of these areas.
Bottlenecks to objective achievement
The research found that staffing is another clear bottleneck for IT teams at organizations. As businesses implement security strategies, appropriate staffing must be considered for the best chances of optimal network security. Furthermore, the issue of the skills gap arises in this finding, as many as 35 percent of organizations lack employees who have an adequate skill set to do the required job.
A variety of factors account for security team bottlenecks. Fifty percent of organizations are limited by a lack of available budget to do the actual work. 45 percent of respondents stated that achievements are not a high enough priority for the overall business. Notably, 51 percent of organizations are unable to achieve their objectives due to requiring different tools from different vendors, or lack of staff overall.
Richard Wilding, Director of New Ventures and Innovation at BAE Systems Applied Intelligence said: “The findings of the survey reveal a great deal of insight into the decision-making process for IT pros. Perhaps the most alarming finding is the clear gaps in budget and operational resources that limit development of advanced security strategies as well as the implementation practices to protect business operations. With greater focus on network security policy management from the executive level down, operations can take advantage of the newest tools and strategies that exist to make policy management more automated, more efficient, and ultimately more manageable.”

In response to the research, BAE Systems is exploring a new technology which provides greater visibility of the network. Known as Idrisi, the solution helps teams in mid-sized businesses understand what’s on their network and how they can improve their network security. Its Simulation Engine provides a risk score and recommendations for improvement, allowing businesses to focus on the highest priority areas of their networks.
To find out more register at:


For further information, please contact:
BAE Systems
Nick Haigh, BAE Systems
+44 (0) 7525 390982
Bite Communications
Diego Phillips 
In January 2018, Spiceworks surveyed IT decision-makers through online research. A total of 400 respondents (300 in the U.S. and 100 in the UK) took the 12-minute online survey.

Security Policy Management Survey Infographic

BAE Systems Survey: Security Policy Management Infographic - Click to download the full infographic

BAE Systems Survey: Security Policy Management Infographic - Click to download the full infographic

Respondent Qualification Criteria: The IT decision-makers were required to work at organizations with 100+ employees. These IT Pros are involved in the decision making process for network/security solutions at their organization & employ security solutions that produce alerts.
Key Statistics:
  • Around 40 percent of organizations’ IT teams spends the majority of their time on network security activities.

The top three network security policy management problems are:
  1. Difficulty in simulating the impact of changes 
  2. Ensuring that network security policy is being implemented as intended. 
  3. The time taken to update policy on all required devices
With 65% of respondents facing difficulties in at least one of these areas.
  • 50 percent say budget is a bottleneck to objective achievement
  • Network security policy problems are worsened by increased network complexity and frequent changes to the network.
  • Organizations use a variety of solutions to manage network security policy problems. Smaller organizations are more likely to deploy manual solutions, while organizations with 1,000-4,999 employees skew toward automated tools.
About BAE Systems
At BAE Systems, we provide some of the world's most advanced technology defence, aerospace and security solutions. We employ a skilled workforce of 82,500 people in over 40 countries. Working with customers and local partners, our products and services deliver military capability, protect people and national security, and keep critical information and infrastructure secure.
At BAE Systems Applied Intelligence, we help nations, governments and businesses around the world defend themselves against cybercrime, reduce their risk in the connected world, comply with regulation, and transform their operations. For further information about BAE Systems Applied Intelligence, please visit  
12 Default Profile Image
Head of External Communications
Media Team
Digital Intelligence

Download resources

Survey Results: Security Policy Management Infographic

1.36 MB


Idrisi: Greater Network Visibility

If you recognise the challenge of keeping a complex network secure, find out how Idrisi can help.
Find out more