The European e-Business Report The European e ... - empirica

More documents

Recommendations

Info

The European E-Business Report 2005 Exhibit 1.6-5: Prevalence of ICT security measures by size-band Companies with a firewall 0 20 40 60 80 100 Companies using secure server technology, such as SSL* protocol 0 20 40 60 80 100 Micro (0-9) Small (10-49) Medium (50-249) Large (250+) 54 65 84 94 Micro (0-9) Small (10-49) Medium (50-249) Large (250+) 24 31 43 61 Companies having rules relating to encryption of data 0 20 40 60 80 100 Companies with rules that specify the use of digital signature or Public Key Infrastructure 0 20 40 60 80 100 Micro (0-9) 14 Micro (0-9) 11 Small (10-49) 22 Small (10-49) 14 Medium (50-249) Large (250+) 31 50 Medium (50-249) Large (250+) 21 36 Companies with an ICT-security policy 0 20 40 60 80 100 Companies with a disaster recovery plan in place 0 20 40 60 80 100 Micro (0-9) Small (10-49) Medium (50-249) Large (250+) 21 32 57 79 Micro (0-9) Small (10-49) Medium (50-249) Large (250+) 33 42 60 83 Companies which practise risk assessment using a pre-defined methodology 0 20 40 60 80 100 Companies with an information-security management system 0 20 40 60 80 100 Micro (0-9) 14 Micro (0-9) 18 Small (10-49) 17 Small (10-49) 22 Medium (50-249) 26 Medium (50-249) 37 Large (250+) 46 Large (250+) 50 Companies with a staff-training programme in information security awareness 0 20 40 60 80 100 Micro (0-9) Small (10-49) Medium (50-249) Large (250+) 14 18 26 37 Base: Companies using computers. N = 5218. In "% of firms", i.e. % of firms as legal units, irrespective of their size. * SSL = Secure Sockets Layer Source: e-Business W@tch (e-Business Survey 2005) 47
The European E-Business Report 2005 Variations by sector To simplify sectoral analysis, the underlying covariance structure was investigated by means of a principal component analysis (PCA). 37 Security controls and measures were grouped along three principal factors: 'management and policy', 'secure components', and 'PKI (Public Key Infrastructure) and encryption'. The resulting picture by sector shows the clear dominance of enterprises in the IT services sector in the introduction of security controls in the areas of 'secure components' and 'management and policy'. Yet despite this leading position the incidence of damage is high for these enterprises, showing that the sector clearly faces some of the highest levels of threat. Fortunately, perhaps, enterprises in this sector can draw the know-how to select, implement and maintain secure systems from core business units, in contrast to other sectors. The strongest contrast with the behaviour of enterprises in the IT services sector is given by companies in food and beverages, textile industries, tourism and construction. These latter sectors score lowest on all three factors. At the same time, these sectors are among those with the smallest average size, from which follows that they have a particularly large proportion of small and micro enterprises, whose behaviour dominates the statistics. 1.6.3 Summary of key findings Incidence of security breaches • The mean time between security-related incidents with significant impact on an enterprise is well under 2 years in the most vulnerable sectors in Europe, such as tourism and IT services. • Malicious software and unsolicited e-mail currently have the greatest impact, followed by failures of hardware or software. • Incidence of damage from breaches of security and other security-related costs vary with size of enterprise, but the trends of incidence with size are mixed in direction. • From a sector perspective, firms in the IT services sector report the greatest number of incidents. • The automotive industry is an interesting case, exhibiting very low levels of incidence of both hardware and software malfunction. • However, the pattern is not consistent for all items. Low levels of incidence in some sectors are rather the result of less prevalent use of ICT hardware and lower dependence on ICT in respective sectors. Deployment of ICT security controls • Basic components such as firewalls and secure servers already exhibit high levels of penetration. • Low application levels are reported for data encryption and deployment of public key infrastructure. This could hamper the development of distributed and mobile computing environments, and the evolution of interoperable solutions for many e- business processes. • A low proportion of enterprises reporting that they train their staff in security awareness, carry out risk assessment or, in particular, have put a security management system in place. • Clear dominance of enterprises in the IT services sector in the introduction of security controls in the areas of 'secure components' and 'management and policy'. • In contrast, low endowment with security controls in food and beverages, textile industries, tourism and construction. However, this is partly explained by the dominance of small firms in these sectors. 37 Principal component analysis (PCA) involves a mathematical procedure that transforms a number of (possibly) correlated variables into a (smaller) number of uncorrelated variables called principal components. The first principal component accounts for as much of the variability in the data as possible, and each succeeding component accounts for as much of the remaining variability as possible. 48
Page 1 and 2:
The European e-Business Report 2005
Page 3 and 4:
The e-Business W@tch The European C
Page 5 and 6:
The European E-Business Report 2005
Page 7 and 8:
Page 9 and 10:
Page 11 and 12:
Page 13 and 14:
Page 15 and 16:
Page 17 and 18: 16 The European E-Business Report 2
Page 19 and 20: The European e-Business W@tch Secti
Page 39 and 40: The European E-Business Report 2005
Page 51 and 52: Types of ICT solutions used and pro
Page 67: The European E-Business Report 2005
Page 119 and 120:
Page 121 and 122:
Page 123 and 124:
Page 125 and 126:
104 The European E-Business Report
Page 127 and 128:
Page 129 and 130:
Page 131 and 132:
Page 133 and 134:
Page 135 and 136:
Page 137 and 138:
Page 139 and 140:
Page 141 and 142:
Page 143 and 144:
Page 145 and 146:
Page 147 and 148:
Page 149 and 150:
Page 151 and 152:
Page 153 and 154:
Page 155 and 156:
Page 157 and 158:
Page 159 and 160:
Page 161 and 162:
Page 163 and 164:
Page 165 and 166:
Page 167 and 168:
Page 169 and 170:
Page 171 and 172:
Page 173 and 174:
Page 175 and 176:
Page 177 and 178:
Page 179 and 180:
Page 181 and 182:
Page 183 and 184:
Page 185 and 186:
Page 187 and 188:
Page 189 and 190:
Page 191 and 192:
Page 193 and 194:
Page 195 and 196:
Exhibit 3.2-1: Greek information so
Page 197 and 198:
Page 199 and 200:
Page 201 and 202:
Page 203 and 204:
Page 205 and 206:
Page 207 and 208:
Page 209 and 210:
Page 211 and 212:
Page 213 and 214:
Page 215 and 216:
Page 217 and 218:
Page 219 and 220:
Page 221 and 222:
Page 223 and 224:
Page 225 and 226:
Page 227 and 228:
Page 229 and 230:
Page 231 and 232:
Page 233 and 234:
Page 235 and 236:
The E-Business Scoreboard - a two-l
Page 237:
Contact information e-Business W@tc
show all

The European e-Business Report The European e ... - empirica

Create successful ePaper yourself

Delete template?

Save as template?