Shelfware is the big security problem that no one wants to talk about. Loosely defined as technology that remains unused, underutilized or implemented incorrectly, it is the elephant in the room for many chief information security officers (CISOs).
A 2015 survey by Osterman Research, sponsored by Trustwave, illustrated just how bad the problem is. In a report of 172 small-, medium- and large-sized enterprises, researchers found that those investing in new security controls often ended up underutilizing the technologies in which they just invested — or simply not using them at all.