False Sense of IT Security

Most It and information security executives believe their companies are keeping data safe and secure – but those rsy assessments don’t align with the ugly reality.

72% of 9600 respondents from around the world said they were confident in their organization’s information security capabilities, according to the 2012 Global State of Information Security Survey by PwC.

Companies need
 
 -An information security strategy
 
 -A chief security officer who reports directly to organizational leadership
 
 -An annual measurement and review process
 
 -An understanding of past security events.

Only 13% of all companies meet those requirements.

Identity Management Strategy
 
 2009 48% / 2011 41%

Business Continuity/Desaster Recovery
 
 2009 53% / 2011 39%

Annual Privacy Policy Review
 
 2009 52% / 2011 39%

Dedicated Monitoring of Employee Internet Use
 
 2009 57% / 2011 49%

Source: PM Network 1/2012