Innovations that Bring New Benefits also Bring New Security Risks, Research Reveals

Innovations that make data more accessible and devices more mobile also create new challenges for information technology (IT) professionals responsible for cybersecurity, according to new research released today by IT industry association CompTIA.

The vast majority of business and IT executives (83 percent) surveyed for CompTIA's Ninth Annual Information Security Trends Study believe the security threat level is on the rise.

One of the biggest factors driving cybersecurity concerns today is the greater interconnectivity of devices, systems and users, the survey reveals. Among the disruptive IT trends contributing to greater interconnectivity - and raising new security concerns - are the proliferation of big data, social technologies, cloud computing and mobility.

One in five organizations in the CompTIA study reported definitely experiencing the loss of sensitive data in the past 12 months, while 32 percent reported likely data loss. Among companies that experienced such data loss in the past 12 months:

-- 65 percent lost confidential corporate financial data,
-- 52 percent lost confidential employee, such as human resources records,
-- 27 percent lost confidential customer data, such as credit card numbers, and
-- 26 percent lost corporate intellectual property or trade secrets.

The research indicates organizations are most likely to struggle with data loss prevention (DLP) efforts when data is in motion, such as transmitting sensitive information in an unencrypted format.

Beyond data loss, three in four organizations reported first-hand experience with a security incident in 2011, a slight increase over the 2010 rate. On average, organizations reported seven incidents for the year, about half classified as serious.

Topping the list of security concerns is the all-encompassing threat known as malware. Yet while malware represents the most pervasive threat, in some ways malware attacks are less feared than highly targeted distributed denial of service attacks, advanced persistent threats and other types of malicious hacking attacks. In the CompTIA study, 58 percent of respondents believe hacking is a more critical threat today compared to two years ago.

Human error continues to be a significant factor in security breakdowns. A net of 53 percent of IT and business executives say human error is more of a factor today than it was two years ago.
Seven in ten organizations rate security as a higher or upper level priority this year, compared to 49 percent in 2010. Four out of five companies expect to increase information security budgets.

The intensified focus on information security has created a job market where the demand for skilled workers exceeds the current supply. In the CompTIA study, 40 percent of organizations say they face challenges in hiring IT security specialists.

Organizations view certified staff as an integral part of their security apparatus. More than eight in ten organizations formally or informally use security certifications as a means to validate expertise; and 94 percent believe security certifications deliver a positive return on investment.

More information on IT can be found at www.SupportIndustry.com