Security - CIOInsight
Home arrow Security arrow Information Security Strategies Found Lacking: PwC

Security Slideshow:
Information Security Strategies Found Lacking: PwC

By Bob Violino on 2011-10-05


A large number of global companies think they have an effective information security strategy in place and are proactively executing their security plans, according to a new survey by consulting firm PricewaterhouseCoopers LLP (PwC). But a relatively small percentage of the organizations surveyed (13%) are what the firm calls true information security “leaders.” The PwC 2012 Global State of Information Security Survey, in which more than 9,600 business and IT executives worldwide were surveyed online between February and April 2011, finds that companies are actively investing in information security, driven by a quickly evolving and dangerous landscape of cyber threats, according to PwC. “The face of cyber threats has rapidly evolved from curious college kids taking their hand at hacking to an enormous global ecosystem of cyber-crime,” says Mark Lobel, principal at PwC and co-author of the study. “Companies need a comprehensive approach to security--technology, education and awareness--and a very small number have truly mastered all three.”

LATEST STORIES

BLOGS
 
  • of
43%
43% of respondents think their company has an effective information security strategy in place and are proactively executing their plans.

High confidence
72% of respondents report confidence in the effectiveness of their organization's information security activities.

Few leaders
Only 13% of respondents prove to be true information security leaders

What's an information security leader?
PwC identifies this as having:
• an overall information security strategy in place,
• a CIO or executive equivalent who reports to top management,
• measured and reviewed security policy effectiveness, and
• an understanding of the security breaches facing the organization in the past year.

Getting personal
43% of respondents say their company has a security strategy for employee use of personal devices.

Mobile strategies
37% of respondents say they their company has a security strategy for mobile devices.

Social security
32% of respondents say their company has a security strategy in place for social media.

Cloud’s impact
More than half (54%) of respondents say that cloud technology has improved security, while 23% say it has increased vulnerability.

Big driver
Many respondents (including 64% in industrial manufacturing, 60% in technology and 49% in entertainment and media), say the existence of an Advanced Persistent Threat (APT) is driving their organization's security spending.

16%
Only 16% of respondents say their organization is prepared for an APT and has security policies that are able to confront such a threat.

Unusual suspects?
17% of respondents identify customers as the source of security breaches, and 15% identify partners or suppliers as the source.

  • More slideshows

FEATURED SPONSORED VIDEOS

FEATURED SPONSORED ARTICLES

Erasable E-Paper Saves Trees, Cuts Costs

Why Smart Companies Should Adopt the Lessons of Gaming

Interest in Mobile WiFi Hotspots Fuels New Solutions

A Closer Look at Public Cloud Security

View More Articles

  Brought to You By
Click Here



 

Advertisement

Sponsored Links
  • Try Windows Azure free for 90 days

  • Introducing the world's first family of systems with integrated expertise

  • FREE Securing Smartphones & Tablets for Dummies Book from Sophos
  • 77% of the Fortune 500 Manage Content Securely with Box.
  • Leverage your virtual computing environment with Dell.
  • Build an IT Infrastructure That Delivers the Future
  • 5 New Technologies That Will Change Enterprise ITAdvertisement
  • eWEEK Quick LInks

     
    Close this advertisement