Can you use ONE WORD to describe the biggest challenge facing information security today?

Security awareness

Complexity.

Over the past several years three main factors have exploded:

1.  The global explosion of regulatory compliance mandates.

2.  The increasing sophisitication and coordination of threats:  Organized crime,  State-sponsored cyber espionage/attacks and the increasingly coordinated 'hacktivism' threats.

3.  The increasing demand for data:  The business demands that data must be accessed from any device, anywhere at any time without security getting in the way.

Those three main drivers have multiplied by many time the complexity of the problem facing information security professionals today.  To make matters worse, the rate at which each of those three drivers is growing makes it nearly impossible to make data access convenient, compliant and secure using traditional methods.

The answer?  Companies need help.  Security needs will always exceed resources so companies need to view information security strategically - focusing80% of their attention on the20% that is most impactful and least difficult to correct in a coordinated fashion.

Insider Threat is a risk a organization is always carrying. Lack of compliance in saving the data falling to incorrect hands is always been a big challange.

Risk based and cost effectiveness

Not really and the issue is too big for a one word answer. If you pushed me:

Compliance

change managament

anonymous

DBA

The increasing kind of threats and harshness of attacks has created protective information a complex challenge. To Improved information of the vital problems underlying data security will facilitate practitioners, researchers, and government employees alike to grasp and solve the biggest issues.

I think awareness of stakeholders.. Sometimes, even though they will be aware, they will be casual, which is again is risky

awareness

limitless possibilities