{"id":2473,"date":"2011-10-13T07:00:06","date_gmt":"2011-10-13T15:00:06","guid":{"rendered":"http:\/\/www.formtek.com\/blog\/?p=2473"},"modified":"2011-10-13T07:00:06","modified_gmt":"2011-10-13T15:00:06","slug":"security-organizations-overconfident-in-their-security-preparedness","status":"publish","type":"post","link":"https:\/\/formtek.com\/blog\/security-organizations-overconfident-in-their-security-preparedness\/","title":{"rendered":"Security:  Organizations Overconfident in their Security Preparedness"},"content":{"rendered":"<div id=\"_mcePaste\">Are you confident in your organization&#8217;s information security strategy? \u00a0If you are, you&#8217;re in the company of quite a few. \u00a072 percent of organizations were pretty confident that they are doing a good job with handling information security. \u00a0And as many as 43 percent of senior executives in organizations even thought that their organizations were actually best-in-class in their approach to security. \u00a0The problem is though, it turns out that only 13 percent of companies actually are in good shape security-wise. \u00a0Those are results published by PwC in their report\u00a0<a title=\"PwC State of Information Security Survey\" href=\"http:\/\/www.pwc.com\/gx\/en\/information-security-survey\" target=\"_blank\">2012 Global State of Information Security Survey<\/a>.<\/div>\n<div>\n<div id=\"_mcePaste\">The report identifies four categories of organizations in their approach security. \u00a0The survey asked respondents to self-categorize their organizations.<\/div>\n<div>\n<ul>\n<li><strong>Front-runners<\/strong> are those organizations that have their security act together. \u00a0They spent the time to create a well thought-out \u00a0security plan and they then proactively execute it.<\/li>\n<li><strong>Strategists <\/strong>have taken the time to create security plans but, for whatever reason, have failed to execute it<\/li>\n<li><strong>Tacticians <\/strong>haven&#8217;t bothered with creating a plan but still have managed to do a good job in achieving a high level of security<\/li>\n<li><strong>Firefighters <\/strong>have no security plan and are totally reactive to threats when they occur<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<div>One of the few areas where the report uncovered some good news is with security awareness. \u00a0Thanks to regulations like Sarbanes-Oxley and headline news stories in the media about security exploits, people are very aware that information security is an important issue. \u00a0That&#8217;s backed up by the results of the PwC study which \u00a0shows \u00a0that over the last five years that security awareness has significantly increased. \u00a0But the bad news is that those same organizations where awareness is high, not much has been done about it. \u00a0The report finds that security capabilities across most organizations have actually been degrading rather than improving.<\/div>\n<div>The report finds that the three main areas where organizations need improvement are:<\/div>\n<div>\n<ul>\n<li>More support and backing from C-level executives<\/li>\n<li>Better planning and execution for security related to Social Media data<\/li>\n<li>Security for data being stored in the cloud<\/li>\n<\/ul>\n<\/div>\n<div>Organizations that truly are leaders in implementing security were identified to have the following characteristics:<\/div>\n<div>\n<ul>\n<li>Have both a Chief Information Security Office and a Chief Security Officer<\/li>\n<li>Have created an overall information security strategy<\/li>\n<li>Regularly review and measure the effectiveness of their implementation<\/li>\n<li>Employed dedicated security personnel<\/li>\n<\/ul>\n<\/div>\n<div>It&#8217;s an interesting report from PwC, and the authors did a great job in making the results of the report accessible by creating an \u00a0<a title=\"PwC Interactive Security survey\" href=\"http:\/\/www.pwc.com\/gx\/en\/information-security-survey\/giss.jhtml\" target=\"_blank\">interactive web page<\/a> that allows the reader to drill down and visually investigate all the data collected in the survey.<\/div>\n<div class=\"lightsocial_container\"><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/digg.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-organizations-overconfident-in-their-security-preparedness%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/digg.png\" alt=\"Digg This\" title=\"Digg This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.reddit.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-organizations-overconfident-in-their-security-preparedness%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/reddit.png\" alt=\"Reddit This\" title=\"Reddit This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.stumbleupon.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-organizations-overconfident-in-their-security-preparedness%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/stumbleupon.png\" alt=\"Stumble Now!\" title=\"Stumble Now!\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/buzz.yahoo.com\/buzz?targetUrl=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-organizations-overconfident-in-their-security-preparedness%2F&amp;headline=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/yahoo_buzz.png\" alt=\"Buzz This\" title=\"Buzz This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.dzone.com\/links\/add.html?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-organizations-overconfident-in-their-security-preparedness%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dzone.png\" alt=\"Vote on DZone\" title=\"Vote on DZone\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.facebook.com\/sharer.php?t=&amp;u=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-organizations-overconfident-in-their-security-preparedness%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/facebook.png\" alt=\"Share on Facebook\" title=\"Share on Facebook\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/delicious.com\/save?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-organizations-overconfident-in-their-security-preparedness%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/delicious.png\" alt=\"Bookmark this on Delicious\" title=\"Bookmark this on Delicious\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.dotnetkicks.com\/kick\/?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-organizations-overconfident-in-their-security-preparedness%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dotnetkicks.png\" alt=\"Kick It on DotNetKicks.com\" title=\"Kick It on DotNetKicks.com\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/dotnetshoutout.com\/Submit?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-organizations-overconfident-in-their-security-preparedness%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dotnetshoutout.png\" alt=\"Shout it\" title=\"Shout it\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.linkedin.com\/shareArticle?mini=true&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-organizations-overconfident-in-their-security-preparedness%2F&amp;title=&amp;summary=&amp;source=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/linkedin.png\" alt=\"Share on LinkedIn\" title=\"Share on LinkedIn\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.technorati.com\/faves?add=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-organizations-overconfident-in-their-security-preparedness%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/technorati.png\" alt=\"Bookmark this on Technorati\" title=\"Bookmark this on Technorati\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/twitter.com\/home?status=Reading+https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-organizations-overconfident-in-their-security-preparedness%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/twitter.png\" alt=\"Post on Twitter\" title=\"Post on Twitter\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.google.com\/buzz\/post?url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-organizations-overconfident-in-their-security-preparedness%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/google_buzz.png\" alt=\"Google Buzz (aka. Google Reader)\" title=\"Google Buzz (aka. Google Reader)\" \/><\/a><\/div><\/div>","protected":false},"excerpt":{"rendered":"<p>Are you confident in your organization&#8217;s information security strategy? \u00a0If you are, you&#8217;re in the company of quite a few. \u00a072 percent of organizations were pretty confident that they are doing a good job with handling information security. \u00a0And as<span class=\"ellipsis\">&hellip;<\/span><\/p>\n<div class=\"read-more\"><a href=\"https:\/\/formtek.com\/blog\/security-organizations-overconfident-in-their-security-preparedness\/\">Read more &#8250;<\/a><\/div>\n<p><!-- end of .read-more --><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[31],"tags":[],"class_list":["post-2473","post","type-post","status-publish","format-standard","hentry","category-security"],"_links":{"self":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/2473","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/comments?post=2473"}],"version-history":[{"count":0,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/2473\/revisions"}],"wp:attachment":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/media?parent=2473"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/categories?post=2473"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/tags?post=2473"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}