[caption id="attachment_1314" align="alignleft" width="300" caption="Cybercrime Defense"]
[/caption]
Your protection against cybercrime is not as effective as you might think based on the information that a disturbing 90% of organizations only have one to five employees handling information security, according to Digital Defenses Insight 2011 report.
In addition, the survey found that close to 17% of organizations had no information security training for their employees (against things like phishing scams), and close to half only had one to two sessions per year. For the 2011 report, Digital Defense surveyed 127 IT professionals from organizations of various sizes and a broad range of industries, as well as vulnerability data gathered from its cloud-based vulnerability scanning product.
Organizations are still not grasping that they have to staff their information security function just like they would anything else. Its not just simply another part of IT. It is really a functional area that needs to be defined by an organization and properly staffed as well, said Tom DeSot, Digital Defenses chief information officer.
DeSot related that one large organization that had thousands of employees only had two people dedicated to information security.
The feedback we get frequently is that only one person is responsible for hundreds or potentially even thousands of computers, security for those computers, and making sure there are no breaches on the network. A key take away is that organizations really need to understand that in 2011 security is a cost of doing business, DeSot told Infosecurity.
For the complete article click here: Companies continue to under-staff information security
Proof up your employees against cybercrime with Internet security awareness training. Take a free Internet security phishing test!
Stu Sjouwerman
KnowBe4
[/caption]Your protection against cybercrime is not as effective as you might think based on the information that a disturbing 90% of organizations only have one to five employees handling information security, according to Digital Defenses Insight 2011 report.
In addition, the survey found that close to 17% of organizations had no information security training for their employees (against things like phishing scams), and close to half only had one to two sessions per year. For the 2011 report, Digital Defense surveyed 127 IT professionals from organizations of various sizes and a broad range of industries, as well as vulnerability data gathered from its cloud-based vulnerability scanning product.
Organizations are still not grasping that they have to staff their information security function just like they would anything else. Its not just simply another part of IT. It is really a functional area that needs to be defined by an organization and properly staffed as well, said Tom DeSot, Digital Defenses chief information officer.
DeSot related that one large organization that had thousands of employees only had two people dedicated to information security.
The feedback we get frequently is that only one person is responsible for hundreds or potentially even thousands of computers, security for those computers, and making sure there are no breaches on the network. A key take away is that organizations really need to understand that in 2011 security is a cost of doing business, DeSot told Infosecurity.
For the complete article click here: Companies continue to under-staff information security
Proof up your employees against cybercrime with Internet security awareness training. Take a free Internet security phishing test!
Stu Sjouwerman
KnowBe4
