2010/2011 Computer CrIme and SeCurIty Survey - Gatton College ...

2010 / 2011 CSI Computer Crime and Security SurveyPercentage of Security Functions OutsourcedBy Percentage of Respondents2010 Figures on Outside, 2009 Figures on InsideNone(64.0%)81-100% (1.8%)61-80% (2.3%)41-60% (4.1%)21-40% (5.9%)Up to 20%(22.1%)2010 CSI Computer Crime and Security Survey 2010: 222 RespondentsFigure 18grew from 12.8 percent last year to 18.6 percent this year, with the increased percentage offsetby drops in the categories below 5 percent of the IT budget. This continues a similar jump notedlast year.This doesn’t mean, necessarily, that security departments were given more money to spend thistime around. One perfectly rational explanation would be that IT budgets were trimmed overall, butsecurity expenditures were deemed to be an investment that simply had to be made. That said,however, estimates from other organizations showed IT expenditures overall either holding steadyor only declining slightly during 2009 (U.S. economic woes not withstanding), thus it is our beliefthat security spending actually rose to some degree.The survey additionally asks about outsourcing of security. Last year there was a noticeable decreasein outsourcing over the prior year. This year, figure 18 shows that numbers fell far closerto the previous year. It’s too early to be sure, but we’re inclined to see last year’s percentages assomething of a blip. Two years ago, for instance, the percentage of respondents who said they’doutsourced more than 20 percent of their security functions was 15 percent. While it dropped toonly 8 percent last year, this year’s results return to 14.1 percent. All that said, it remains the case28