Investigating Cybersecurity Assessment Practices: Enhancing Defenses in the Philippines

Cybersecurity assessments are essential for safeguarding organizations against cyber threats. This study investigates the current state of cybersecurity assessment practices, including red teaming, penetration testing, vulnerability disclosure programs (VDP), and bug bounty programs, within Philippine organizations. A mixed-methods approach is employed, incorporating quantitative surveys of cybersecurity professionals across diverse industries to assess these practices' prevalence, efficacy, and challenges. In-depth qualitative interviews with key stakeholders offer further insights into strategic implementations, operational obstacles, and perceived benefits. The findings highlight a growing recognition of the importance of proactive security measures, yet significant gaps in adoption and execution persist. Factors such as organizational size, industry type, and resource allocation significantly influence the effectiveness of these practices. The study provides crucial recommendations to enhance cybersecurity strategies based on these results. These recommendations emphasize targeted training initiatives, increased awareness campaigns, and policy interventions. These insights empower policymakers, industry leaders, and cybersecurity practitioners to strengthen their security frameworks and cultivate a robust cybersecurity strategy for the Philippines.