AccessMyLibrary provides FREE access to over 30 million articles from top publications available through your library.
Create a link to this page
Copy and paste this link tag into your Web page or blog:
(From Financial Director)
Byline: Tom Berry.
Instances of security breaches of corporate IT systems are increasing dramatically. A recent PwC report* for the DTI found that 78% of large businesses suffered some form of breach in 2002, whether they were targeted by hackers, had files corrupted by viruses, data stolen by employees or systems brought to a standstill by denial of service attacks. Only 24% of companies admitted to such breaches in 2000.
Whether the stigma attached to reporting security failures has lessened, or an explosion in criminal activity accounts for the rise in reported instances of cyber crime is debatable. But what is certain, according to some IT analysts, is that, although companies are getting better at buying IT security kit, board-level executives aren't being smart enough when they sign the cheques and implement strategy.
Graham Titterington, senior analyst at Ovum thinks security could be tightened if board members stopped claiming to be involved in security issues and started to take ownership of the issue. "Security is an amalgam of a lot of different approaches and technologies and buying decisions come from different areas of the organisations. So, while putting anti-virus software on a machine is pure, simple procurement, user authentication is a line of business issue, and security at the server and gateway is an issue for the IT department," he says.
"That fragmentation of decision making is a prohibitor and I would like to see much more buy-in from board level to drive a unified procurement process. There seems to have been an increase in concern at board level - but their input is still quite woolly."
Pan Pantziarka, technical architect at Compass Management Consulting, thinks the all-pervasive nature of IT ...