InfoWorld – A broad spectrum of IT people, including those close to security functions, appear to have
little awareness of key security issues impacting their organizations, a new
survey shows.


border=0 alt="Security Policies and Procedures and Audit Program" align=right
src="http://e-janco.com/images/SecurityManual_Audit.gif" width=182
height=177>


The survey, which polled 430 members of the Oracle Application Users Group
(OAUG) conducted by Unisphere Research and sponsored by Application Security
Inc. included directors and managers of information technology, developers and
programmers, database and systems administrators, systems architects, and
analysts and professionals from the HR and financial functions.


About 22 percent of respondents claimed to be extensively involved in
security functions, 60 percent claimed a limited or supporting role, and the
rest said they were not involved with security at all. About 100 respondents
belonged to companies with more than 10,000 employees.


What the survey showed was a surprising lack of awareness of security issues among the
respondents. For instance, just 4 percent admitted to being fully informed about
security breaches within their organizations. About 80 percent of those who said
their organizations had suffered a data breach in the past year were unable to
tell which IT components might have been impacted by the breach.


alt="Security Threats" align=middle
src="http://e-janco.com/images/WebSecurityThreats.png">


There appeared to be even less knowledge or acknowledgement of the costs
associated with a data breach. Nine out of 10 of those who said their
organizations had been breached said they had no idea of the resulting costs to
their companies.


More than 53 percent said they had no idea about the budgets allocated for
security spending, or were not privy to the data. One out of three respondents
expressed a lack of understanding of security threats, while more than half
expressed the belief that security efforts were being constrained by a lacking
budget.

Resources
Post Your Resume to 65+ Job Sites
Resume Service

Post to Twitter Tweet This Post