Managers forced to 'walk a tightrope' when it comes to IT security
Business managers are coming under increasing pressure to balance the need to reduce overheads while simultaneously providing IT departments the resources they need to combat online security threats.
That is according to Symantec vice-president John W Turner, who told delegates at the Gartner Information Security Summit in London that the threat posed by online hackers and viruses is likely to grow over the coming years.
As such, this will require managers of organisations of all sizes to make tough choices when it comes to allocating budgets to various departments, with many set to walk a "tightrope" between cutting costs and boosting security capabilities.
Mr Turner told the conference: "Every technology leader I talk to says they feel like they are always walking on this tightrope, which is how much can they operationalise, because they are [reducing costs] or trying to be more efficient, but also, while looking at that, how do they make sure they are addressing the risk of their business and making sure they are addressing the right amount of risk in the business."
These comments come as the £25 million Centre for Secure Information Technology becomes operational in Belfast.
Comments
Depends on the value you put on minimising risk.
Imagine the vice-president of an organisation selling IT security solutions suggesting that businesses should continue to invest in IT security solutions.
Whatever next?!?
I'm sure the threats are always changing and new threats emerging however c70% of all data protection breaches occur within an organisation - i.e. because of someone who has inside access to systems - not hackers.
The next large majority comes from sheer incompetence, leaving laptops in taxis and trains; losing data sticks and cd's full of personal information.
All very avoidable at no additional cost.
How true Colin.
HSBC were recently fines £3m by the FSA for data security failings including regularly sending unencrypted data by post, leaving files with customer details out on shelves or not locking them away in cabinets and failing to train staff properly on data security issues. This was despite the fact that these issues had been highlighted by the compliance team as risks to the business!
http://www.fsa.gov.uk/pages/Library/Communication/PR/2009/099.shtml
I wonder how long it will be before the new Centre for Secure Information Technology gets hacked? :-)