Why IT Executives Disregard Security Policies

By Karen A. Frenkel  |  Posted 03-16-2016 Email

A new study finds that a surprisingly high percentage of IT executives—45 percent—knowingly circumvent organizational security policies, and many have even successfully hacked their own or another organization. IT decision-makers between the ages of 18 and 44 demonstrate a "much more cavalier" attitude toward IT security than those over age 45. "It was alarming to see such a high incidence of non-compliant behavior by IT personnel," said Stephen Midgley, vice president of Global Marketing for Absolute Software, a security firm. "Even if these actions are being performed to validate existing infrastructure, senior leadership should be aware that this activity is occurring. It may also be worthwhile to consider third-party audits to ensure adherence with corporate security policies." The survey was conducted online from Oct. 28 to Nov. 11 among 501 U.S. adults 18 years or older who hold IT director/executive, IT manager, IT administrator, IT security, or other IT information security management roles. They were employed at companies with 50 or more workers.

Karen A. Frenkel writes about technology and innovation and lives in New York City.


Submit a Comment

Loading Comments...