Strengthening Cybersecurity Through Lifecycle Management: Insights from HP’s Latest Report on Device Security Risks
HP Report Reveals Urgent Need for Enhanced Cybersecurity Across Device Lifecycles
A new report from HP highlights critical cybersecurity risks linked to lapses in securing hardware at every stage of the device lifecycle. Based on a study of over 800 IT and security decision-makers and 6,000 work-from-anywhere employees, the findings reveal an alarming oversight of platform security—particularly for PCs, laptops, and printers.
The report shows that 81% of IT decision-makers recognize the need for robust hardware and firmware security; however, a staggering 68% admit that investments in these areas are often neglected. This neglect is leading to rising costs related to security breaches and management inefficiencies.
Key insights reveal significant vulnerabilities: 34% of organizations have experienced supplier failures in cybersecurity audits, while 60% highlight inadequate collaboration between IT and procurement during device acquisition. Additionally, over half of IT managers point to lax practices around BIOS password management, and more than 60% delay firmware updates—despite acknowledging the urgency due to evolving threats driven by AI.
The impact of these oversights is profound. Organizations face potential losses of $8.6 billion annually due to lost or stolen devices, with many employees taking an average of 25 hours to report missing equipment. Furthermore, data security concerns prevent nearly half of IT managers from effectively recycling or repurposing old devices, exacerbating the e-waste issue.
“Choosing technology providers is a matter of trust, but it cannot be blind trust,” warns Michael Heywood, HP’s Business Information Security Officer. To strengthen cybersecurity, the report calls for a holistic approach to managing platform security, from procurement to decommissioning. As cyber threats become increasingly sophisticated, organizations are urged to act swiftly to protect their digital infrastructures.