- of

Nearly 60% of IT security pros feel security management process isn't coordinated or is just “reactive triage.”
61% say their IT security process is not considered effective among internal customers/stakeholders.
11% believe their IT security process is considered very effective.
17% say processes are planned, documented and measured.
Almost 70%say processes aren't consistently measured for results, if measured at all.
14% say measurement is “heavy” and consistent.
42% use four or more different products to address top security needs; 21% use just one product.
80% say proactive process-improvement initiatives are either understaffed,inconsistent or non-existent.