2010/2011 Computer CrIme and SeCurIty Survey - Gatton College ...

More documents

Recommendations

Info

2010 / 2011 CSI Computer Crime and Security SurveyHow Have Regulatory Compliance Efforts AffectedYour Overall Information Security Program?By Percent of RespondentsOrganization’s security improved64.0%Organization’s security was damaged3.8%Upper management made security ahigher business priority48.4%Security budget increasedSecurity resources were reallocated tosupport compliance efforts34.4%32.8%Additional staff were hired20.4%New security technology was deployed45.2%20102009Other14.0%0 10 20 30 40 50 60 70 802010 CSI Computer and Security Survey 2010: 186 RespondentsFigure 21The answer seems to be no. More than half of respondents say regulatory compliance improvedsecurity at their organization and half of them report that upper management made security ahigher business priority (Figure 21). In 45.2 percent of cases, respondents report that new technologywas deployed (which might or might not be a good thing for security, but one at least hopesthat it helps. At CSI events we are often told anecdotally that regulatory compliance is what hasturned the tide in receiving budgetary support for security investments that had been requestedfor years without success.Technologies DeployedThroughout the life of the survey, we’ve asked what security technologies our respondents havedeployed to protect their organizations. Invariably and not surprisingly, anti-virus systems and firewallshave topped the list with respondents reporting their deployment into the high ninetieth percentiles.As figure 22 shows, this year is no exception and, furthermore, values for the numeroustechnologies we inquire about have by and large remained close enough to their values last yearthat we don’t think they particularly merit comment.32
2010 / 2011 CSI Computer Crime and Security SurveyAnti-virus softwareFirewallAnti-spyware softwareVirtual Private Network (VPN)Types of Security Technology UsedBy Percent of Respondents2010 200997.0%94.9%84.6%79.1%Vulnerability / Patch ManagementEncryption of data in transitIntrusion detection systemEncryption of data at rest(in storage)Web / URL filteringApplication firewall67.5%66.2%62.4%59.8%59.4%58.5%Intrusion prevention systemLog management softwareEndpoint security software / NACData loss prevention /content monitoringServer-based access control listForensic toolStatic account logins / passwords50.4%46.2%45.3%44.0%44.0%43.2%42.7%Public Key Infrastructure (PKI)Smart cards and otherone-time tokensSpecialized wireless securityVirtualization-specific toolsBiometrics35.0%35.0%28.2%25.2%20.5%Other6.4%0 20 40 60 80 1002010 CSI Computer Crime and Security Survey 2010 Respondents: 234Figure 2233
Page 1: 2010 / 2011 CSI Computer Crime and
Page 5 and 6: 2010 / 2011 CSI Computer Crime and

2010/2011 Computer CrIme and SeCurIty Survey - Gatton College ...

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?