Survey shows uncontrolled network access ‘causing CTO's sleepless nights’

A survey of more than 200 CTOs has revealed that internal security – protection within the local area network (LAN) – is currently UK organisations’ Achilles heel, leaving them open to dangers such as loss or theft of sensitive information, fraud and litigation.

‘Employees with unrestricted access to all LAN assets’ was the number one concern for CTOs. Rounding out the top concerns were controlling contractors; protecting against malware; and documenting user activity. Together, these issues represented almost 70 percent of near-term investment plans to improve internal security.

This focus isn’t surprising, given that nearly half (47 percent) of respondents had either very basic or no network access restrictions in place. Meanwhile, almost half (44 percent) admitted to having little or no LAN auditing capability, leaving themselves with no formal records should litigation take place. In addition, they have no way to verify what suspect users, such as those announcing they’re leaving a company, have done on the LAN with regard to accessing inappropriate materials.

ConSentry Networks, the leader in secure switching, surveyed the CTOs in April to explore attitudes towards security threats and priorities for future investment.

Additional findings that illustrate many organisations’ current vulnerabilities include:

• License to Look – when asked where respondents felt they had to invest more heavily, ‘Controlling access to the network’ was the top priority. ‘Restricting access for guests and contractors’ and ‘Controlling what information employees can reach’ each generated 18 percent of responses – this shows an awareness of the need to protect the LAN. However…

• Enemy at the Gates – when asked about their level of confidence in perimeter security that would protect against external threats, nearly one fifth (19 percent) said they had ‘little’ or ‘no confidence’

• The Devil Inside – there was even less confidence around internal security, as nearly a third of respondents (30 percent) had ‘little’ or ‘no confidence’

• Communication Breakdown - nearly one fifth (17 percent) of respondents admitted to only meeting heads of strategic functions such as Sales, HR and Finance on either a six-monthly or annual basis, leaving them out of touch with the business’ evolving technology needs.

•Date: 7th June 2007 • Region: UK •Type: Article •Topic: IT continuity
Rate this article or make a comment - click here