What is the average age of your IT systems?

Security & GRC

1-3 years old19%

4-6 years old59%

7-10 years old18%

11-20 years old3%

20+ years old

237 PARTICIPANTS
1.1k viewscircle icon2 Upvotescircle icon2 Comments
Sort by:
Director in Manufacturing4 years ago

It’s a bit hard to answer. If we have 120k people on teams is that one App that is Zero years old since it’s in the cloud and in theory perpetually upgraded ?

Is a 20 year would of date ERP on an AS/400 with 2,000 users 2,000 twenty year old apps?

I can tell you our oldest app is over 35, and our newest app is probably days old

Lightbulb on2 circle icon1 Reply
no title4 years ago

Indeed! Is Salesforce 22 years old, or the time from the last 3x/year update (or depending on which architecture)?<br><br>There’s also the discussion of what makes up a “system” - and the impacts are has to do with it.

Lightbulb on2

Content you might like

Does the CIO/CISO reporting structure undermine security at an organization?

Yes64%

No35%

Which tech conference do you intend to attend in person next year or have already participated in this year, and what motivated your choice?

Read More Comments

Where should cyber budget be spent between identify, protect, detect, respond recover.

Identify43%

Protect58%

Detect43%

Respond24%

Recover10%

View Results

Has anyone drafted an SOW for a cloud-based SIEM with setup, migration, and maintenance? I’m working on a FedRAMP-authorized SIEM SOW, migrating from on-prem Splunk, covering data, searches, alerts, dashboards, and models.  Scope includes Environment Setup:  Cloud provisioning, configuration, testing. Connectors/Parsers: Custom data source integration. Content Development: Rules, use cases, threat feeds. Performance Tuning: Query/index optimization. Runbooks: Operational procedures. Also required: 24x7 support, maintenance, lifecycle and application management, role-based training, and documentation.  Must comply with NIST SP 800-53, CJIS, and FedRAMP Moderate+. Goal: Secure, scalable SIEM for rapid deployment. I may be missing elements, so suggestions are welcome. Please share redacted SOWs or tips if possible.

With AI adoption accelerating across enterprises, what do you view as the top information security challenge that leaders should address? How can CISOs, VPs and Director’s align governance, risk and security investments to enable AI innovation without creating new exposures?

Read More Comments