2010/2011 Computer CrIme and SeCurIty Survey - Gatton College ...

More documents

Recommendations

Info

2010 / 2011 CSI Computer Crime and Security SurveyRespondents by Industry Sector2010 figures on outside, 2009 figures on insideRespondents byNumber of Employees2010 figures on outside, 2009 figures on insideAll Other Responses: 21.8%Consulting: 21.5%50,000 or more: 10.6%1-99 : 31.3%10,000 - 49,999: 12.1%Retail: 3.2%Financial Services: 10.6%Manufacturing: 6.0%Local Government: 3.2%Information Technology: 10.9%Education: 8.9%1,500 - 9,999: 22.4%100 - 499: 13.2%Health Services: 6.6%Federal Government: 7.4%500 - 1,499: 10.3%2010 CSI Computer Crime and Security Survey 2010: 349 Respondents2010 CSI Computer Crime and Security Survey 2010: 348 RespondentsFigure 1Figure 2Respondents by Annual Revenue2010 figures on outside, 2009 figures on insideRespondents by Job Title2010 figures on outside, 2009 figures on insideCEO: 12.6%Over $1 billion: 28.1%CIO: 4.9%Under $10 million: 38.2 %Other: 38.0%CSO: 2.9%CISO: 10.6%Chief PrivacyOfficer: 0.3%$100 million to $1 billion: 13.3%System Administrator: 10.9%Security Officer: 20.0%$10 million to $99 million: 20.4%2010 CSI Computer Crime and Security Survey 2010: 285 RespondentsFigure 32010 CSI Computer Crime and Security Survey 2010: 350 RespondentsFigure 44
2010 / 2011 CSI Computer Crime and Security Surveydata sets, it’s interesting to note that many of the baseline statistics from the survey remainremarkably consistent year over year, suggesting that the respondent group has a fair degree ofconsistency year over year.As Figure 1 shows, organizations covered by the survey include many areas from both the privateand public sectors. There’s a fair degree of consistency in the number of respondents by industrysector. What’s less in line this year is the number of financial institutions reporting, a continueddrop from last year. For several years, financial services made up the largest chunk of respondents,but last year finance (15 percent of respondents) was inched out by consulting (15.7 percent). Thisyear financial services dropped to 10.6 percent of respondents, with consulting growing anotherfive percent to 21.5 percent.It’s not clear why there would be such a precipitous drop in respondents from the financial sector.One might speculate that they are simply no longer willing to talk about their incidents. A Verizonstudy, to be discussed more thoroughly later in the report, cites the incredible statistic that 94percent of the compromised data records tallied in their case library last year came from breachesin the financial services sector.There is enough consistency to the key demographic breakdowns over time that it seems reasonableto make certain assumptions about trending, but it’s important to bear in mind that anyconclusions you draw based on the assumption that there’s a longitudinal validity to the surveysover time is based on your judgment of similarity over time—there’s nothing statistically provableabout it.The CSI survey pool continues to lean toward respondents from large organizations (see Figure2), but not quite so heavily as in past years. Still, the breakdown remains that, broadly speaking,organizations with 1,500 or more employees accounted for somewhat less than half of the respondents.Further, 42 percent of the respondents from commercial enterprises reported an annualrevenue of $100 million or more (see Figure 3). This number has dropped over the past coupleof years, perhaps as a result of the down economy. The main takeaway here is that the survey poolbreakdown clearly favors large organizations when compared to the U.S. economy as a whole, inwhich there is a preponderance of small businesses.The survey also categorizes respondents by job title (Figure 4). As the graph shows, 31 percentof the respondents are senior executives—chief executive officer (12.6 percent), chief informationofficer (4.9 percent), chief security officer (2.9 percent) and chief information security officer (10.6percent). Last year these categories totalled 31.5 percent of respondents—again, the numbersare consistent with those from recent years. One lone respondent identified themselves as chiefprivacy officer, which is also consistent over time.5
Page 1: 2010 / 2011 CSI Computer Crime and
Page 9 and 10: 2010 / 2011 CSI Computer Crime and

2010/2011 Computer CrIme and SeCurIty Survey - Gatton College ...

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?