CIOs not taking security breaches seriously

By Tim Ferguson, Special to ZDNet Asia
Monday, June 30, 2008 10:42 AM

CIOs and internal auditors don't feel IT fraud and data privacy is a serious threat to their business despite the spate of high profile data losses and privacy breaches.

Nearly two-thirds (65 percent) of internal audit chiefs surveyed by business consultancy Ernst & Young, don't regard data privacy and IT fraud as the most important issues.

Corporate breaches and data privacy regulation were ranked sixth in the top 10 concerns by internal audit execs and ninth by CIOs.

Erol Mustafa, head of IT internal audit services at Ernst & Young, said senior executives must recognize the importance of data privacy and should address it as part of their overall risk management and compliance strategy.

Other top concerns for CIOs over the next 12 months are major business programs, business continuity and disaster recovery.

Separate research found that despite the economic downturn, IT security spending should not suffer.

Just 17 percent of security professionals surveyed said they expect cuts to IT security spending in the next 12 months.

Mike Davies, director of identification and authentication services at VeriSign which conducted the research, said security and trust needs to be top of the agenda for online businesses if they want to maintain the boom in online transactions.

Tim Ferguson of Silicon.com reported from London.


WORTHWHILE?

0

0 votes
Blog

Talkback 0 comments

There are currently no comments for this post.


Tech Jobs Now!

Search for your ideal tech job:

Use shades of gray to enhance scale in Excel

Microsoft Office Suite

Excel's palette is generous, but don't throw buckets of pigment all over your spreadsheets just because you can.


Read more »



Ultimate 2012 recovery site: the moon

Blog thumbnail

Have you seen the disaster movie "2012"? A friend from Control Risks and I did, and we reluctantly concluded we wouldn't be able to write off the cost of our..... by Nathaniel Forbes

Read more »

Tags

  1. attack
  2. authentication and encryption
  3. blog
  4. data security
  5. e - mail
  6. hacking
  7. internet
  8. malware
  9. microsoft corp.
  10. network
  11. network security
  12. pc security
  13. researcher
  14. security
  15. security management
  16. software
  17. spam and phishing
  18. symantec corp.
  19. viruses and worms
  20. web