- More than 80 per cent prioritize unintentional data leakage or deliberate data theft as major problem; email considered biggest security risk
Secure Computing Corporation (Nasdaq: SCUR), a leading enterprise gateway security company, has announced the results of its IT Director survey showing a rising concern over “insider threats” and widespread acknowledgement of being unprepared for emerging Web-based attacks. The survey was carried out among senior attendees of an IT security exhibition held in London recently.
More than 80 per cent of the 103 Directors surveyed prioritized insider threats, defined as either unintentional data leakage or deliberate data theft, as greater concerns when asked whether they believed insider or outsider threats posed a bigger problem to their organization. Less than one in five respondents, or 17 per cent, believe that the external threats posed by hackers are more dangerous.
Nimer Ghazal, Regional Sales Manager - Middle East, Secure Computing, said, “It’s fascinating to see how perceptions of the threat landscape among senior IT decision makers is evolving, with the insider threat and data leakage rivaling traditional external threats among IT Directors’ primary concerns. It’s also very encouraging to see that security is starting to be seen as a genuine business enabler rather than just a necessary evil.”
The growing concern over insider threats is being attributed to the fact that 37 percent of respondents have experienced leakage of sensitive information in the past year. Internal security was thus a primary consideration when respondents were asked to rank potential future investments that included perimeter security, staff mobility and network performance.
Email was identified as the biggest current security risk to their organizations by 34 per cent of respondents, followed by Voice over IP at 25 per cent, and lastly by browser-related threats at 21 per cent. However, 79 per cent of respondents felt that they could be better prepared for Web-borne threats.
Established external threats continue to be the biggest concern in a developing Web 2.0 environment. Viruses top the list of offenders, with 31 percent of IT Directors feeling it is the biggest threat, while spam comes in second at 18 percent and data leaks a close third at 14 percent. Curiously, only 22 per cent of respondents felt that hackers posed the biggest external security concern. Malware, however, worried 56 per cent of Directors.
Internal security was identified as the priority planned investment of 35 per cent of respondents; despite the expected economic downturn, “IT asset management for cost savings” was given the lowest priority by Directors. IT Security was considered a genuine business enabler and as important as any other IT project by 89 per cent of respondents, with only 11 per cent or one in 10 respondents perceiving it as a “necessary evil.” The survey finally revealed that over two-thirds or 68 per cent of respondents believe that data breach disclosure should be compulsory in the UK as it is in the US.
