Slow Security: Internal Friction Halts New Controls for Most Orgs

Cisco's recent survey of 8,000 security professionals across 30 markets reveals that most organizations struggle to roll out new security controls in a timely manner. Only 21% of respondents say they can switch on a new security control within six months, while the top-performing group manages it in just over half this time.

The survey highlights internal friction as a major contributor to these delays, with procurement issues, infrastructure decisions, and conflicting priorities among the main culprits. This is despite teams having access to the necessary tools, suggesting that organizational culture and processes are more significant barriers than technological limitations.

Cisco notes that frontier AI models can identify software vulnerabilities at an unprecedented scale and speed, leaving human teams struggling to keep up. Fewer than one in ten respondents express confidence in their organization's ability to stay ahead of emerging threats.