- of

43%
43% of respondents think their company has an effective information security strategy in place and are proactively executing their plans.
High confidence
72% of respondents report confidence in the effectiveness of their organization's information security activities.
Few leaders
Only 13% of respondents prove to be true information security leaders
What's an information security leader?
PwC identifies this as having:
• an overall information security strategy in place,
• a CIO or executive equivalent who reports to top management,
• measured and reviewed security policy effectiveness, and
• an understanding of the security breaches facing the organization in the past year.
Getting personal
43% of respondents say their company has a security strategy for employee use of personal devices.
Mobile strategies
37% of respondents say they their company has a security strategy for mobile devices.
Social security
32% of respondents say their company has a security strategy in place for social media.
Cloud’s impact
More than half (54%) of respondents say that cloud technology has improved security, while 23% say it has increased vulnerability.
Big driver
Many respondents (including 64% in industrial manufacturing, 60% in technology and 49% in entertainment and media), say the existence of an Advanced Persistent Threat (APT) is driving their organization's security spending.
16%
Only 16% of respondents say their organization is prepared for an APT and has security policies that are able to confront such a threat.
Unusual suspects?
17% of respondents identify customers as the source of security breaches, and 15% identify partners or suppliers as the source.