87% of cybersecurity managers say quick compliance programs are actually increasing risk and making businesses less resilient

Date:
Wed, 24 Jun 2026 13:10:19 +0000

Description:
Security professionals are skeptical if the speed comes at the expense of actual business resilience.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter IO research shows 87% of UK cybersecurity managers doubt the credibility of speedfocused certification programs Rapid, automated compliance creates a false sense of security, with certifications like ISO 27001 not guaranteeing resilience Experts stress continuous monitoring and human oversight, as automated recommendations and evidence still need validation and interpretation Speed-focused compliance programs could help businesses get cybersecurity certifications quicker, but security professionals are skeptical if the speed comes at the expense of actual business resilience.

This is according to new research from resilience specialists IO, which
claims that 87% of senior cybersecurity managers in the UK believe the speed at which certification is achieved affects its credibility. According to the report, compliance initiatives that are either heavily automated or
compressed into short timeframes are creating a false sense of security. Certifications like ISO 27001 might help companies win contracts and maintain an image, but researchers are warning that certification alone does not guarantee actual operational resilience. Latest Videos From Watch full video here: Gaps in security posture Organizations that focus on achieving certification as quickly as possible are at risk of leaving gaps in their security posture, says Chris Newton-Smith, CEO of IO. Certification can open doors to new contracts and demonstrate commitment to recognised standards but treating certification as the end goal rather than the outcome of
establishing and embedding effective compliance is more often than not at the expense of long-term resilience. Businesses must treat compliance not as a tick-box exercise but an evolving, iterative, and business critical project.

Polling 251 cybersecurity managers in the UK, IO found that 31% consider continuous controls monitoring as the strongest indicator of compliance resilience. At the same time, a fifth (21%) said certifications could reflect security controls at the time of an audit, but could soon after become obsolete. You may like Cyber Essentials update could put your public sector contracts at risk The shocking reason 43% of UK businesses have been hit by cyber attacks last year Are cyber pros fooling themselves with skills development?

IO also stressed the importance of human expertise in these programs. Almost half (45%) of the respondents said human involvement is still essential when evaluating if automated compliance recommendations are still relevant and accurate, and another third (33%) said complex regulations still need human interpretation.

Finally, 32% stressed the importance of human in validating compliance evidence generated by automated systems. Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me
with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over. The
best antivirus for all budgets Our top picks, based on real-world testing and comparisons

Read our full guide to the best antivirus 1. Best overall: Bitdefender Total Security 2. Best for families: Norton 360 with LifeLock 3. Best for mobile: McAfee Mobile Security Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.



======================================================================
Link to news story: https://www.techradar.com/pro/security/87-percent-of-cybersecurity-managers-sa y-quick-compliance-programs-are-actually-increasing-risk-and-making-businesses -less-resilient


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)