SMBs lagging behind on enterprise security
By Miya Knights,
The information security status of small-to-midsized businesses (SMBs) lags far behind that of larger firms, new survey results have revealed.
The preliminary findings of research conducted by Anas Tawileh, a Cardiff University researcher were revealed yesterday to delegates of the independent Information Security Solutions Europe (ISSE) conference being held this week in Madrid.
They revealed that, of the respondents responsible for IT security in companies of less than 250 employees in a variety of industries and geographies including the UK, only 47 per cent kept track of what information their IT systems handled.
Nearly half (46 per cent ) of large organisations said they had conducted a comprehensive impact assessment of the information they held in IT systems, compared to only 31 per cent of midsized and 24 per cent of small organisations.
Another area Tawileh highlighted was around data backups. While most SMBs were quite good at backing up their data, he said 85 per cent admitted to not testing that their backups were effective or how long it would take restore systems using them.
And half of the SMBs questioned said they do not assess the security status of personally identifiable information held by their systems, much as less confidential corporate data.
“The survey revealed more of a focus on maintaining the confidentiality of data and authentication of access than data integrity and non-repudiation, Tawileh said.He said this would be most relevant where smaller firms supply larger ones and have to comply with contractual security requirements, in line with the larger organisation’s regulatory requirements.
“There may be less regulation for SMBs, but they need to think carefully about the threats to their businesses associated with disclosing a key customer’s confidential data, as well as their own," he added.
"They need to start taking a more holistic approach to their security that encompasses all aspects, including the social and human, as well as technical,”
Related Tags
advertisement
Latest Security Features
How to be a successful online fraudster
Ever wanted to know how easy it is to be an identity thief and earn a fortune? IT PRO reveals all…
- What you need to know about ID cards
- Lessons to learn from a year of data breaches
- Q&A: DNS inventor Paul Mockapetris
- Is the password ill-equipped for the modern world?
- Why is backing up given short shrift?
- Defending Europe against cyber attack
- The present and future of IT security
- I’m an IT manager, get me out of here!
- IT around the world: Russia
Latest Security Reviews
Fortinet FortiGate-3810A
Rating: ![]()
- Clearswift MIMEsweeper Web Appliance ENW
- NetASQ U6000 UTM appliance
- AVG Internet Security SBS Edition 8.0
- Finjan Vital Security Web Appliance NG-6000S
- LogLogic MX2010
- Exclusive: WatchGuard Firebox Core X750e
- Sophos ES4000 Security Appliance
- Microsoft Forefront Security for Exchange and SharePoint
- EXCLUSIVE: Juniper Networks SSG 550 UTM appliance
advertisement
Latest News Videos in Security
Video: Eugene Kaspersky outlines security threats
IT PRO speaks to Eugene Kaspersky, chief executive and founder of Kaspersky Lab.
White papers
Want more background on today's hottest IT trends?
Visit IT PRO's white paper library for more on virtualisation, encryption and other topics.
Register for IT PRO
You'll get exclusive member benefits including free white papers, downloads, Webinars and weekly newsletters full of the latest IT PRO news, reviews, insight and expertise.



Social Bookmark this article: What is this?