Cisco ties Korea's 58 out of 100 cyber defense score to turf-guarding between security and IT teams

Cisco built the friction finding into the index. Friction carries 50% of the score, against 25% each for coverage and speed ^[13], and the report page gives the reason: asked what would have made the biggest difference in their last incident, six in ten practitioners pointed to something inside their own organization, such as disconnected teams, fragmented data or skill gaps ^[14]. A country weak on team structure loses points by design, and the 6-point gap between Korea's 58 and the 64 global average ^[16] cannot be split into coverage, speed and friction from the published figures. The same page carries the line "Fix ownership before you fix tools." ^[15]

The Korea-specific evidence is narrower than the headline. The gap in single-team operation is 17 points ^[17], the largest of the friction measures Cisco published for Korea. On time spent collecting and connecting data from scattered systems instead of responding to threats, Korea is at 44% against 40% worldwide, a 4-point gap [c9, d4]. On security metrics too technical to persuade management, Korea is better than the average, 40% against 43% ^[8].

The team-structure gap between top-tier defenders and the rest is 46 points ^[18], and Cisco says that for this group organizational capability mattered more than the scale of investment ^[22]. Carl Solder, chief technology officer for Cisco Australia and New Zealand, described the leaders in architectural terms: they use the network "as a sensor for the entire security stack and as a policy enforcement engine," he said ^[12]. That is a claim about tooling, from the same company whose report page ranks ownership ahead of it, and the published figures do not show which came first at the leading firms.

We think the organizational reading holds for one of Korea's three published friction measures, the team gap, and is overstated for the other two. The view fails if a Korean friction subscore comes in at or above the global one, since the 6-point gap would then sit in coverage or speed ^[16]. A small Korean sample would weaken it too, because it could move the 24% single-team share by several points ^[5]; the published material does not include the sample size. Reverse causation would also break it: top-tier firms may have merged their teams after their results improved.

For a Korean chief security officer the allocation question is how much of next year's budget goes to platforms and how much to getting security, network and IT teams to share tools. Cisco's survey points to the second.