Connect with us

BizNews

Security response planning on the rise, but containing attacks remains an issue – IBM

While organizations surveyed have slowly improved in their ability to plan for, detect and respond to cyberattacks over the past five years, their ability to contain an attack has declined by 13% during this same period.

Published

on

IBM announced the results of a global report examining businesses’ effectiveness in preparing for and responding to cyberattacks. While organizations surveyed have slowly improved in their ability to plan for, detect and respond to cyberattacks over the past five years, their ability to contain an attack has declined by 13% during this same period.

The global survey conducted by Ponemon Institute and sponsored by IBM Security found that respondents’ security response efforts were hindered by the use of too many security tools, as well as a lack of specific playbooks for common attack types.

While security response planning is slowly improving, the vast majority of organizations surveyed (74%) are still reporting that their plans are either ad-hoc, applied inconsistently, or that they have no plans at all. This lack of planning can impact the cost of security incidents, as companies that have incident response teams and extensively test their incident response plans spend an average of $1.2 million less on data breaches than those who have both of these cost-saving factors in place.

The key findings of those surveyed from the fifth annual Cyber Resilient Organization Report include:

  • Slowly Improving: More surveyed organizations have adopted formal, enterprise-wide security response plans over the past 5 years of the study; growing from 18% of respondents in 2015, to 26% in this year’s report (a 44% improvement).
  • Playbooks Needed: Even amongst those with a formal security response plan, only one third (representing 17% of total respondents) had also developed specific playbooks for common attack types — and plans for emerging attack methods like ransomware lagged even further behind.
  • Complexity Hinders Response: The amount of security tools that an organization was using had a negative impact across multiple categories of the threat lifecycle amongst those surveyed. Organizations using 50+ security tools ranked themselves 8% lower in their ability to detect, and 7% lower in their ability to respond to an attack, than those respondents with less tools.
  • Better Planning, Less Disruption: Companies with formal security response plans applied across the business were less likely to experience significant disruption as the result of a cyberattack. Over the past two years, only 39% of these companies experienced a disruptive security incident, compared to 62% of those with less formal or consistent plans.

“While more organizations are taking incident response planning seriously, preparing for cyberattacks isn’t a one and done activity,” said Wendi Whitmore, Vice President of IBM X-Force Threat Intelligence. “Organizations must also focus on testing, practicing and reassessing their response plans regularly. Leveraging interoperable technologies and automation can also help overcome complexity challenges and speed the time it takes to contain an incident.”

Updating Playbooks for Emerging Threats
The survey found that even amongst organizations with a formal cybersecurity incident response plan (CSIRP), only 33% had playbooks in place for specific types of attacks. Since different breeds of attack require unique response techniques, having pre-defined playbooks provides organizations with consistent and repeatable action plans for the most common attacks they are likely to face.   

Amongst the minority of responding organizations who do have attack-specific playbooks, the most common playbooks are for DDoS attacks (64%) and malware (57%). While these methods have historically been top issues for the enterprise, additional attack methods such as ransomware are on the rise. While ransomware attacks have spiked nearly 70% in recent years, only 45% of those in the survey using playbooks had designated plans for ransomware attacks.

Additionally, more than half (52%) of those with security response plans said they have never reviewed or have no set time period for reviewing or testing those plans. With business operations changing rapidly due to an increasingly remote workforce, and new attack techniques constantly being introduced, this data suggests that surveyed businesses may be relying on outdated response plans which don’t reflect the current threat and business landscape.

More Tools Led to Worse Response Capabilities
The report also found that complexity is negatively impacting incident response capabilities. Those surveyed estimated their organization was using more than 45 different security tools on average, and that each incident they responded to required coordination across around 19 tools on average. However, the study also found that an over-abundance of tools may actually hinder organizations ability to handle attacks. In the survey, those using more than 50 tools ranked themselves 8% lower in their ability to detect an attack (5.83/10 vs. 6.66/10), and around 7% lower when it comes to responding to an attack (5.95/10 vs. 6.72/10).

These findings suggest that adopting more tools didn’t necessarily improve security response efforts — in fact, it may have done the opposite. The use of open, interoperable platforms as well as automation technologies can help reduce the complexity of responding across disconnected tools. Amongst high-performing organizations in the report, 63% said the use of interoperable tools helped them improve their response to cyberattacks.

While security response planning is slowly improving, the vast majority of organizations surveyed (74%) are still reporting that their plans are either ad-hoc, applied inconsistently, or that they have no plans at all.

Better Planning Pays Off
This year’s report suggests that surveyed organizations who invested in formal planning were more successful in responding to incidents. Amongst respondents with a CSIRP applied consistently across the business, only 39% experienced an incident that resulted in a significant disruption to the organization within the past two years  compared to 62% of those who didn’t have a formal plan in place.

Looking at specific reasons that these organizations cited for their ability to respond to attacks, security workforce skills were found to be a top factor. 61% of those surveyed attributed hiring skilled employees as a top reason for becoming more resilient; amongst those who said their resiliency did not improve, 41% cited the lack of skilled employees as the top reason.

Technology was another differentiator that helped organizations in the report become more cyber resilient, especially when it comes to tools that helped them resolve complexity. Looking at organizations with higher levels of cyber resilience, the top two factors cited for improving their level of cyber resilience were visibility into applications and data (57% selecting) and automation tools (55% selecting). Overall, the data suggests that surveyed organizations that were more mature in their response preparedness relied more heavily on technology innovations to become more resilient.

BizNews

TikTok Shop, Taguig City partner to empower Filipino MSMEs, creators through ‘Unlad Lokal’

Published

on

TikTok Shop has partnered with Taguig City through its Unlad Lokal program to equip local micro, small, and medium enterprises (MSMEs) and grassroots creators with digital tools, skills, and opportunities to grow their businesses and online presence. The partnership advances the city’s goal of building a future-ready economy while supporting national initiatives to promote inclusive digitalization and alternative livelihoods.

Launched earlier this year in collaboration with the Department of Trade and Industry (DTI), Unlad Lokal reflects TikTok Shop’s commitment to nurturing a digitally empowered MSME sector across the Philippines. Since March 2025, the program has trained over 17,000 entrepreneurs across Metro Manila, Pampanga, and Naga. Building on this momentum, TikTok Shop and its partners are now working with local government units, starting with Taguig, to bring e-commerce education and opportunities to more grassroots entrepreneurs and creators across the country.

“TikTok Shop is committed to empowering Filipino entrepreneurs and creators with the skills, tools, and confidence to thrive in the digital economy,” said Franco Aligaen, Marketing Lead for TikTok Shop Philippines. “Through Unlad Lokal, we’re showing how e-commerce can drive inclusive growth, where every Filipino, regardless of background, can turn creativity into a sustainable digital livelihood and take an active role in the country’s digital transformation.”

Empowering Taguigueños through digital innovation and livelihood

Under Unlad Lokal, TikTok Shop and Taguig City will conduct a series of learning, mentorship, and in-app showcase activities to help local MSMEs and creators strengthen their digital presence. The sessions will cover topics such as digital marketing, live selling, and brand storytelling, empowering participants to expand their reach while sustaining online growth.

The initiative also integrates TikTok Shop’s digital commerce ecosystem into Taguig’s existing MSME support programs, ensuring that innovation directly translates into livelihood opportunities. This partnership complements Taguig’s broader digitalization vision by making technology-driven growth accessible to every community.

“In our Probinsyudad, we believe that every small business is a story of perseverance,” said Taguig City Mayor Lani Cayetano. “Many of our local entrepreneurs started from home kitchens, neighborhood stalls, and small online pages. What they often lack is not talent or passion, but access to tools, networks, and digital knowledge. That is why we welcome Unlad Lokal with open arms. It complements our ongoing programs for MSME development, digital literacy, and innovation under the city’s drive toward a future-ready and inclusive economy.”

Strengthening collaboration between the government and digital platforms

TikTok Shop’s partnerships with the Department of Trade and Industry (DTI), the Department of Information and Communications Technology (DICT), local government units, and telecommunications companies like PLDT and Smart Communications, Inc. reflect the growing synergy between the government, private sector, and digital platforms in building an inclusive and future-ready digital economy.

“Programs like TikTok Shop’s Unlad Lokal bring to life our goal of helping small businesses embrace e-commerce while ensuring they grow sustainably and ethically,” said DTI-NCR Division Chief, Rowena San Jose. “We welcome partnerships that combine innovation with responsibility, especially those that enable our MSMEs to reach wider markets and strengthen consumer trust.”

“Digitalization should be inclusive and secure,” said DICT Secretary Henry Aguda. “Collaborations between platforms like TikTok Shop and government institutions are crucial in ensuring that Filipino entrepreneurs, from local artisans to startup founders, are equipped with the knowledge and tools to thrive in a safe, trusted digital environment.”

Equipping entrepreneurs and creators with digital tools nationwide

As Unlad Lokal continues its nationwide rollout to key cities, including Bacolod, Baguio, Cebu, Davao, and Naga, TikTok Shop emphasized that Unlad Lokal is focused on promoting responsible and safe online commerce. Through the program, sellers and creators are educated on best practices related to transparency, ethical selling, and consumer protection, helping to ensure users benefit from a secure digital marketplace.

“Safety is at the heart of our growth strategy,” Aligaen emphasized. “We continue to invest in education, platform safeguards, and partnerships that promote a reliable and transparent digital marketplace for both sellers and shoppers.”

Unlad Lokal is supported by H.B Jewelry, KILY OFFICIAL, Mikana, Oishi PH, Piattos and Vcut (under Universal Robina Corporation), Tiny Buds Baby Naturals, Tummy Tac, and Vitress, who share TikTok Shop’s mission to advance MSME digitalization, enhance digital literacy, and promote responsible online commerce.

Continue Reading

BizNews

Nostalgia is an asset in company acquisitions, so use it

Tailor nostalgia interventions to different employee categories. Workers with knowledge critical to a company’s value benefit most from identity-based interventions, while “cultural carriers” can help bridge old and new organizational cultures through relationship-focused strategies.

Published

on

When companies are acquired, conventional wisdom suggests that employee nostalgia for their pre-buyout days is a problem to be eliminated so workers can more quickly adapt to the new owners’ ways of doing business.

A study published in the journal Strategic Organization led by UC Riverside School of Business professors Boris Maciejovsky and Jerayr Haleblian suggests this thinking is wrong—especially when the new owners want to retain the most talented, productive, and informed workers.

Nostalgia, they found, serves as a comforting and stabilizing force during takeover periods, when employees feel vulnerable, fear losing their jobs, status, or advancement opportunities, and are thus inclined to send out résumés.

“Rather than viewing nostalgia as living in the past, we demonstrate how it serves as a bridge between employees’ pre-acquisition identity and their post-acquisition reality,” explained Haleblian, the business school’s Anderson Presidential Chair in Business. “This temporal bridging is crucial for maintaining organizational commitment during transitions.”

Drawing from psychology research in emotion regulation, social identity, narrative identity, and attachment theories, the study shows nostalgia isn’t mere sentimentality—it’s a powerful tool that helps preserve identity and meaning during disruptive times, said Maciejovsky, an associate professor of management.

“We challenge the prevailing view that nostalgic emotions are maladaptive responses to change,” Maciejovsky said. “Our research shows that nostalgia can transform negative reactions into positive outcomes, thereby mitigating the talent loss that often jeopardizes acquisition success.”

For employees, nostalgia is often triggered by the upheaval of a corporate acquisition that replaces familiar leadership with unfamiliar faces. By understanding these emotions, the authors argue, managers can see that longing for the past is not resistance but a desire to preserve meaning and identity.

The implications are significant in today’s business climate, where acquisitions of startup companies to gain talent and innovations are commonplace—especially in the tech sector, where the strategy is called “acqui-hiring.” Yet retention is poor: in the U.S., 47% of key employees leave within the first year of an acquisition, and 75% within three years, creating a human capital gap that can reduce company value by 10–15%, according to Mentorloop.com.

The study provides practical guidance for managers, outlining two main approaches to support employees during acquisitions. The first involves identity-preserving interventions, such as maintaining familiar company symbols like names, logos, workspaces, and practices. It also includes honoring historical narratives that connect current practices to valued traditions, while ensuring that the missions of the acquiring and acquired companies remain carefully aligned. 

The second approach centers on relationship-focused interventions, which emphasize building strong connections among employees through team-building activities, heritage celebrations, and shared experiences that foster a sense of social connection.

“Companies like American Airlines have successfully used heritage celebrations, featuring paint schemes from acquired airlines like TWA, to honor predecessor companies while facilitating integration,” Maciejovsky said. “These aren’t just feel-good gestures—they’re strategic interventions that tap into nostalgia’s regulatory benefits.”

The study emphasizes tailoring nostalgia interventions to different employee categories. Workers with knowledge critical to a company’s value benefit most from identity-based interventions, while “cultural carriers” can help bridge old and new organizational cultures through relationship-focused strategies.

The study, titled How Nostalgia Facilitates Post-Acquisition Target Employee Retention: An Agenda for Future Research, was co-authored with Tim Wildschut and Constantine Sedikides of the University of Southampton, UK.

The authors call for future research to test the limits of nostalgia in organizational change,  how buyouts differently affect the acquirer and target employees, and how nostalgia impacts other life changes.

“Transparency about change is important, but so is understanding how emotions like nostalgia can be strategically managed,” Maciejovsky said. “Like any powerful tool, nostalgia can have unintended consequences if we don’t use it wisely—but when applied thoughtfully, it can transform acquisition challenges into retention advantages.”

Continue Reading

BizNews

MSMEs advised to take small steps towards AI adoption

As intimidating and complex artificial intelligence (AI) tools may be, micro, small, and medium enterprises (MSMEs) should take gradual but steady steps towards exploring how these could make operations more efficient and scalable.

Published

on

As intimidating and complex artificial intelligence (AI) tools may be, micro, small, and medium enterprises (MSMEs) should take gradual but steady steps towards exploring how these could make operations more efficient and scalable, according to Converge ICT Solutions Inc. CEO and 51st Philippine Business Conference and Expo (PBC&E) Chairman Dennis Anthony Uy. 

Speaking before the North Luzon Area Business Conference of the Philippine Chamber of Commerce and Industry (PCCI) held in Bataan province, Uy championed technology adoption, especially in the face of widespread use of new technologies such as generative AI. 

“Companies all over the world are trying to adapt to AI. Here in the Philippines, we’re barely scratching the surface. And the smaller businesses, which are just starting to embrace digitalization, have to learn new ways of doing business with the growing pervasiveness of these new technologies,” said Uy.

“AI is not just for medium to large companies. Micro and small businesses can also find a foothold in the use of the game-changing technology,” he added. “With AI adoption, MSMEs can potentially increase efficiency, reduce costs, and drive competitive edge.”

Coming from a trip to Taiwan which is known as the global hub for the semiconductor industry, Uy noted that artificial intelligence is making its way through the manufacturing value chains of most technology sectors.

“If the Philippines can find a niche spot in this value chain, the multiplier to employment, skills and knowledge upgrading, and the effect on downstream industries is massive,” he said. “While micro and small businesses may not yet be able to participate in these larger value chains, where they can benefit from is by taking small steps in adapting AI tools,” noted Uy. 

From the part of the local government, Bataan Governor Jose Enrique “Joet” Garcia III pledged his support to make his province “future-ready” by hosting start-ups and supporting digitally-enabled businesses.

“We want to express the support of the provincial government of Bataan, of course together with all the local government units for the creative and innovative industry. We know this sector is the key to accelerate more productivity and growth, especially for the youth who were born adept to digital devices,” noted Garcia. 

The possibilities of AI use were experienced first-hand by micro and small businesses in the Byte Forward Hackathon jointly organized by Converge, PCCI, the Department of Trade and Industry, and Converge subsidiary Rev21 Labs. 

Converge and the participating small businesses came up with problem statements stemming from actual pain points experienced in the course of business. Ten teams of third and fourth year college students from Bataan came up with solutions aided by AI tools. 

Artificial intelligence will come into bigger focus in the 51st Philippine Business Conference and Expo organized by the PCCI. As Chairman of the Conference, Uy deliberately made the move to make the event ‘technology-forward’ and bring modern, digital solutions to MSMEs. The Conference will be held on October 20-12 at the SMX Convention Center. 

Continue Reading
Advertisement
Advertisement

Like us on Facebook

Trending