September 25, 2023 By Sue Poremba 4 min read

As organizations continue their digital transformation journey, they need to be able to trust that their digital assets are secure. That’s not easy in today’s environment, as the numbers and sophistication of cyberattacks increase and organizations face challenges from remote work and insider behavior. Digital trust can make your organization’s digital transformation stronger. A lack of digital trust can do irreparable harm.

However, according to ISACA’s State of Digital Trust 2023 report, too many organizations struggle to define and implement digital trust. This crucial shortfall can create gaps in security across a number of strategic areas.

What is digital trust?

Companies have relied on trust to build business for centuries. Who hasn’t experienced an agreement based on nothing more than a handshake, trusting that someone’s word was enough? And as more business and personal transactions now happen digitally, those in-person handshakes have moved online. Now consumers depend on more than a company’s word or reputation: They expect a company’s networks and systems will keep personal data safe and secure. That expectation is the basis of digital trust.

But when that digital trust is broken, the consequences are dire. Because data breaches and ransomware attacks have a wide-reaching impact, all stakeholders need to know that their digital relationships with a business are reliable.

“The tolerance for any breach of digital trust is near zero,” Greg Witte, Senior Security Engineer at Huntington Ingalls Industries, wrote in the ebook, Your Top Digital Trust Questions Answered.

This lack of tolerance for the breakdown of digital trust is why 76% of respondents said digital trust is important to digital transformation, according to the ISACA survey. When digital trust is high, the benefits range from a good reputation and stronger customer loyalty to practices that lead to fewer breaches and faster innovation due to confidence in the technology.

However, even though organizations realize that digital trust has such a positive impact on their business practices and will make the digital transformation process smoother, they often do little to ensure the mechanisms promoting high levels of digital confidence are in place. Fewer than one in five companies have made digital trust a priority and nearly one-third of companies have no processes in place to measure digital trust.

How to build digital trust

There are several principles used to build digital trust. They are:

  • Transparency
  • Reliability
  • User experience
  • Security
  • Integrity.

Incorporating these pillars as part of the digital transformation journey does more than provide a foundation for building corporate confidence with stakeholders. It can also go a long way in improving overall cybersecurity maturity and helping the organization meet compliance regulations.


Customers deserve to know details surrounding the collection, storage and use of their personal data. Being transparent about the organization’s practices around data collection and usage is essential to building consumer loyalty. In addition, transparency around customer data is often a requirement of data privacy regulations.


Is your organization able to follow through on the promises it makes with its digital offerings? The customer should feel confident that they can visit the organization’s website or mobile app and know that the transactions are trustworthy because the organization has demonstrated itself to be a good caretaker of PII. E-commerce sites that rely on credit card transactions or healthcare sites sharing medical data must stay current with standards and privacy compliance.

User experience

This builds on reliability. Customers have an expectation when they come to your company via a device. Even with in-person visits, customers want a flawless process, whether it is a checkout without glitches or a database that offers real-time data about items on store shelves. Downtime is a deterrent to good user experience, which means organizations need to have good backup and data loss protection procedures in place.


Consumers are more savvy than ever about the risks to their personal information. Everyone has been directly or indirectly victimized by a data breach or ransomware attack. Building digital trust for better security means not only requiring a solid cybersecurity program inside the company but also requiring third-party vendors and contractors to have robust security systems, as well.


Most consumers understand that cyber incidents will happen even to the most security-mature company. How the company responds will determine customer trust. Having policies in place and reliable messaging will demonstrate the organization’s integrity around digital trustworthiness.

Barriers to achieving digital trust

As mentioned earlier, organizations know the importance of digital trust to overall business practices and ROI. Unfortunately, they are still slow to implement procedures around trust, especially as they add new digital assets.

According to the ISACA survey, the top obstacles to attaining digital trust include:

  • Lack of skills and training
  • Insufficient leadership buy-in on the importance of digital trust
  • Poor alignment between digital trust and business goals
  • Budget shortfalls
  • Lack of technical resources.

All of these barriers can be overcome by implementing the best security practices used in other areas of the organization. Digital trust and cybersecurity aren’t separate, and they shouldn’t be siloed. Just as each new asset within the digital transformation will require its cybersecurity protocols, digital trust should be naturally included.

“As organizations move to a digital-first business model, trust is the essential component that must be earned before, during and after every interaction,” Tracey Dedrick, interim CEO of ISACA, said in a formal statement. “Digital trust is an umbrella that ensures existing functions are operating in sync and in the most optimal manner to ensure others have trust in the organization.”

More from Risk Management

Working in the security clearance world: How security clearances impact jobs

2 min read - We recently published an article about the importance of security clearances for roles across various sectors, particularly those associated with national security and defense.But obtaining a clearance is only part of the journey. Maintaining and potentially expanding your clearance over time requires continued diligence and adherence to stringent guidelines.This brief explainer discusses the duration of security clearances, the recurring processes involved in maintaining them and possibilities for expansion, as well as the economic benefits of these credentialed positions.Duration of security…

Remote access risks on the rise with CVE-2024-1708 and CVE-2024-1709

4 min read - On February 19, ConnectWise reported two vulnerabilities in its ScreenConnect product, CVE-2024-1708 and 1709. The first is an authentication bypass vulnerability, and the second is a path traversal vulnerability. Both made it possible for attackers to bypass authentication processes and execute remote code.While ConnectWise initially reported that the vulnerabilities had proof-of-concept but hadn’t been spotted in the wild, reports from customers quickly made it clear that hackers were actively exploring both flaws. As a result, the company created patches for…

Researchers develop malicious AI ‘worm’ targeting generative AI systems

2 min read - Researchers have created a new, never-seen-before kind of malware they call the "Morris II" worm, which uses popular AI services to spread itself, infect new systems and steal data. The name references the original Morris computer worm that wreaked havoc on the internet in 1988.The worm demonstrates the potential dangers of AI security threats and creates a new urgency around securing AI models.New worm utilizes adversarial self-replicating promptThe researchers from Cornell Tech, the Israel Institute of Technology and Intuit, used what’s…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today