Fastly, Inc. · NASDAQ:FSLY
Fastly — Investor Presentation (September 2022)
40 slides from Fastly's investor presentation, September 2022
Slide 1: WPR2204 – Fastly Global PPT
WPR2204 – Fastly Global PPT September 2022
Slide 2: Project overview and methodology
Project overview and methodology • The survey was conducted among 1,419 IT Decision Makers (with at least some knowledge of cybersecurity) in organisations with 500+ employees (250+ for AUS/NZ) across Japan, US, DACH, UK & Ireland, Spain, AUS & NZ and Nordics. • At an overall level results are accur
Slide 3: Respondent demographics summary
Respondent demographics summary Demographics Total respondents: 1419 Country of residence 200 201 203 204 201 206 204 Department IT: 47% Ops: 24% Executive leadership : 20% Responsibility l 22% IT Management positions (e.g., l 10% Development team leader positions within Director of IT, etc.) l 7% I
Slide 4: Key stats
Key stats 32% predict ‘data 67% are breaches and data currently 71% are confident in their loss’ as the biggest organisation's ability to protect cybersecurity investing in itself against the current threat over the next ‘firewall’ cybersecurity threat landscape 12 months technology 50% say improvin
Slide 5: Summary and Overview
Summary and Overview Cybersecurity threats – Almost a third (32%) predict ‘data breaches and data loss’ as the biggest cybersecurity threat to their organisation over the next 12 1 months, followed by ‘Malware’ (29%) and ‘Phishing’ (26%). Moreover, 46% predict that ‘cyber attacks on remote workers’
Slide 6: Main Findings
&, 2 Laer. ~ ROL FIST 4 J ROR CZ G22
Slide 7: Data breaches and data loss predicted as biggest cybersecurity threat
Almost a third (32%) predict ‘data breaches and data loss’ will be the biggest cybersecurity threat to their organisation over the next 12 months This is closely followed by ‘Malware’ (29%) and ‘Phishing’ (26%) Data breaches and data loss 37% AUS & NZ vs. 32% 25% DACH Malware 29% Phishing 26% Ransom
Slide 8: Cyber attacks on remote workers will drive threats
Just under half (46%) predict that ‘cyber attacks on remote workers’ will drive cybersecurity threats over the next 12 months This increases to 53% for AUS & NZ and 62% for telecommunications industry 53% AUS & NZ vs. Cyber attacks on remote workers 46% 34% Spain An increasingly sophisticated threat
Slide 9: Currently investing in firewall technology
67% are currently investing in ‘Firewall’ technology, and over 50% are investing in ‘Network Security Monitoring tools’ (56%) and ‘Remote employee security’ (51%) A quarter have no plans to invest in ‘WAF’ (26%) or ‘defence against nation state attacks’ (24%) Currently investing in Planning to inves
Slide 10: Increasing cybersecurity investment to prepare for future risks
Almost three quarters (73%) say they are increasing cybersecurity investment to prepare for future cybersecurity risks This increases to 85% for the US and 82% for the financial industry 82% Financial vs. 62% Travel & Tourism We are increasing our cybersecurity 73% investment Our cybersecurity Count
Slide 11: Reasons for not increasing investment: no available budget
22% of respondents who said they are not increasing investment to prepare for future cybersecurity risks say this is because they don’t have the available budget This increases to 30% for Japan 30% Japan vs. 9% DACH We do not have the available budget 22% 29% 500 to 999 employees vs. We do not feel
Slide 12: Median spend on web application and API security
On average (median), $69,300 USD are spent per year on web application and API security control/tools in Japan, compared with $22,990 USD (median) in the Nordics Median (in USD) 69.300 64.900 65.000 54.030 50.000 48.150 22990 Nordics Spain US UK & Ireland AUS & NZ DACH Japan Q5. Approximately how mu
Slide 13: Agree allocated budget addresses cybersecurity risk
While 3 in 5 (60%) agree that their organisation’s allocated budget appropriately addresses cybersecurity risk, just under 1 in 10 do not (8%) This increases to 79% for the US and 78% for the financial industry Agree 60% 79% US vs. 41% Japan 78% Financial vs. 40% Government 68% 5,001 to 10,000 emplo
Slide 14: Inadequate budget could leave business vulnerable
An inadequate cybersecurity budget could leave business vulnerable to cybersecurity threats, believe almost 3 in 5 (58%) Whilst 37% believe their digital transformation journey will be inhibited We will be vulnerable to 66% US vs. cybersecurity threats 58% 50% DACH 67% Government vs. 41% Education O
Slide 15: Organisations rely on 5 cybersecurity solutions
On average (median), organisations rely on 5 network and application cybersecurity solutions This increases to 7 for the Nordics Overall median: 5 Median 7 6 5 5 5 5 4 Japan AUS & NZ DACH Spain US UK & Ireland Nordics Q7. Approximately, how many network and application cybersecurity solutions does y
Slide 16: Around 42% of solutions overlap
And around 42% of these solutions overlap in covering the same threats This average increases to 50% solutions overlapping for the US Country/ Mean Region Construction: 46.7% vs. Travel & Tourism: 37.9% Mean: 41.9% Japan 36.5 19% AUS & NZ 38.3 UK & Ireland 39.4 DACH 41.2 14% Spain 43.5 12% Nordics 4
Slide 17: Only 61% of cybersecurity tools are fully active
On average, only 61% of cybersecurity tools are fully active/deployed This average increases to 67% for the US Government: 64.5 vs. Country/Region Mean Education: 54.6 Japan 54.9 DACH 58.9 Mean: 60.9% 13% 13% 13% Nordics 59.7 12% AUS & NZ 59.9 Spain 61.4 10% 9% 9% UK&Ireland 63.2 US 66.85 7% 7% 5% 2
Slide 18: 38% of WAF security alerts are false alerts
On average, 38% of security alerts detected by WAF are false alerts This average increases to 46% for the US Country/Region Mean Financial: 40.8 vs. Japan 24.8 Transportation: 30.9 Mean: 38.1% Spain 34.9 14% DACH 35 UK & Ireland 38.8 13% 12% AUS & NZ 42.3 11% 10% 10% Nordics 42.5 9% US 45.5 6% 6% 5%
Slide 19: Confidence in hiring talent and protecting against threats
Organisations are less confident in their ability to hire talent that is able to keep up with changing security technologies (65%) than in their ability to protect themselves against the current cybersecurity threat landscape (71%) Unconfident Don't know Confident Your organisation’s ability 85% US
Slide 20: Lack of experience with security technologies in talent pool
43% feel there is a lack of experience with relevant security technologies among the current talent pool when it comes to cybersecurity This increases to 50% for Japan A lack of experience with relevant security 43% 50% Japan vs. technologies 38% AUS & NZ A lack of relevant 30% UK & Ireland vs. 25%
Slide 21: 57% of organisations have had a CISO
57% of organisations have had a CISO for at least the last 12 months And around a quarter are planning to hire a CISO in the next 1-2 years (25%) Yes, we have had a CISO for a longer 34% than 12 months 57% Yes Yes, we have hired a CISO in the last 23% 12 months No, but we are planning to hire a CISO
Slide 22: Who is held responsible for cybersecurity incidents
While security managers (29%) and engineers (21%) are most likely to be held responsible for cybersecurity incidents in their business, almost 1 in 5 (19%) still hold CISOs responsible 35% Tech vs. Security Managers 29% 22% Financial and Telecommunications Security Engineers 21% 27% Nordics vs. 16%
Slide 23: How the role of the CISO is viewed
Over half (52%) believe the role of the CISO is to have an in-depth understanding of all areas of IT While 31% believe it is viewed as having too much legal and operational responsibility Increasingly expected to have an 60% Japan vs. in-depth understanding of all 52% 44% DACH areas of IT 59% Financ
Slide 24: CISO adequately supported for current threat landscape
3 in 5 (59%) agree that their CISO is adequately supported to deal with the current threat landscape This increases to 68% for Spain and 73% for the financial and construction industries 68% Spain vs. 52% UK & Ireland Agree 59% 73% Financial and Construction vs. 35% Government Neither agree nor 32%
Slide 25: Security priorities over the next year
Half (50%) say that improving cybersecurity skills through training an/or talent acquisition is a security priority over the next year, followed by making cybersecurity more accessible (44%) and protecting the new hybrid workforce (38%) Improve cybersecurity skills through training and/or 66% US vs.
Slide 26: Cross functional security taken seriously
Majority (86%) take cross functional security across their organisation ‘seriously’ This increases to 95% for US Very seriously, there is a detailed 43% response plan 86% Seriously Quite seriously, with functional 43% rehearsals from time to time Country/ % Region Not very seriously, we regularly au
Slide 27: Perception of the value of cybersecurity has increased
64% think their organisation’s perception of the value of cybersecurity is more valuable than before This increases to 74% for Spain and 79% for the financial industry More valuable than 74% Spain vs. 64% before 55% Japan 79% Financial vs. 51% Telecommunications Having the same value 35% as previous
Slide 28: Organisation responsible for its own cybersecurity strategy
Almost three quarters (73%) agree that their organisation is largely responsible for building its own cybersecurity strategy, irrespective of governmental activities 51% find their government’s cyber regulations to be a hindrance to developing their cybersecurity strategy % Agree Strongly agree Agre
Slide 29: Concern about remote working culture
82% are concerned about adopting a remote working culture since the pandemic This increases to 89% for UK & Ireland, and decreases to 71% for DACH We are more concerned about cyber risk since adopting a remote working culture 48% 82% Concerned We are just as concerned about cyber risk since adopting
Slide 30: Impact of cybersecurity strategy on innovation
22% say their organisation's cybersecurity strategy has improved their ability to innovate, which increases to 42% for the US It has hampered our 29% ability to innovate It has had no influence 61% Japan vs. on our ability to 50% 27% US innovate 42% US vs. It has improved our 17% Nordics and 22% abi
Slide 31: Advantages of a consolidated security solution
Visibility (40%), simplicity (39%) and cost (38%) top three advantages of a consolidated security solution from a single provider Better visibility into the security solution, which 55% US vs. enables better decision-making 40% 34% DACH 45% Retail/Wholesale vs. Simplicity - just one point of contact
Slide 32: Advantages of a best-of-breed approach
Whereas, almost half (45%) see ‘being able to fully protect against the current threat landscape’ and ‘multiple, best in class solutions’ (44%) as the top advantages of a best-of-breed approach Country/ % Being able to fully protect against the current threat landscape 45% Region Japan 31% Nordics 3
Slide 33: Demographics
Demographics
Slide 34: Country / Region
Country / Region Australia & New Zealand 15% Nordics 14% DACH 14% UK & Ireland 14% Spain 14% US 14% Japan 14% S0. Which country do you live in? Select one Base: 1,419 :
Slide 35: Company size
Company size 250 to 499 1% 500 to 999 22% 1,000 to 5,000 37% 5,001 to 10,000 16% 10,001 to 25,000 9% 25,001 to 75,000 6% More than 75,000 9% S1. How many employees does your organisation have? Select one Base: 1,419 :
Slide 36: Primary industry
Primary industry Technology (IT hardware/software) 15% Financial (Banking) 10% Retail/Wholesale (including e-commerce) 9% Manufacturing (process) 6% Government (Local/National) 6% Healthcare 6% Construction/Engineering 4% Telecommunications / ISP / Web Hosting 4% Manufacturing (discrete) 4% Transpor
Slide 37: Department
Department IT 47% Operations 24% Executive Leadership 20% Other 10% S3. Which of the following best describes the department you sit within? Select one Base: 1,419 :
Slide 38: Responsibility within organisation
Responsibility within organisation Application architect 3% Cloud architect 1% Cloud operations 3% Cloud security architect 1% Developer or similar individual contributor 5% Development team leader 10% Infrastructure operations 5% IT management (e.g., Director of IT, etc.) 22% IT/network analyst/sta
Slide 39: Cybersecurity decision making
Cybersecurity decision making Yes, I make or influence decisions regarding 56% this Yes, I am fully aware of this 23% Yes, I am somewhat aware of this 21% S5. Within your current job role, are you aware of or do you make or influence decisions regarding cybersecurity within your Base: 1,419 organisa
Slide 40: Sapio Research contact details
Sapio Research 2 St Andrew's Hill London, EC4V 5BY t: (+44) 0207 2361 604 e: [email protected] www.sapioresearch.com Audience | Brand | Content Research