Organisations need to shift security approach to meet threats — Ernst & Young
Posted on October 31, 2012, Wednesday
KUALA LUMPUR: Organisations need to fundamentally shift their approach to information security in order to meet the threats presented by existing and emerging technologies, according to Ernst & Young’s Global Information Security Survey 2012 report.
The report showed that organisations were implementing incremental improvements to their information security capabilities to provide short-term solutions, but without tackling the issues associated with the overall information security threat.
The survey was based on responses from over 1,850 chief information officers (CIOs) and chief information security officers and other information security executives in 64 countries.
“With 31 per cent experiencing a higher number of security incidents in the last two years, the need to develop a robust security architecture framework has never been greater,” Ernst & Young said in a statement yesterday.
However, it found that 63 per cent of organisations have no such framework in place and only 16 per cent of respondents reported that their information security function fully meets the needs of the organisation.
Ernst & Young Global Information Technology (IT) Risk and Assurance Services leader, Paul van Kessel said, “The new normal for the CIO is that fast is not fast enough.
“The velocity and complexity of change is happening at a staggering pace, with emerging markets, continuing economic volatility, off-shoring and increasing regulatory requirements adding to an already complicated information security environment,” he said.
Meanwhile, Susanna Lim, Advisory Partner and IT Risk and Assurance Services leader for Ernst & Young Malaysia, added: “There are no longer lines that divide business and personal IT activities.
“However, organisations have undoubtedly improved their information security capabilities, but these are still insufficient to answer the continuous threats companies are exposed to,” she said.
“Our survey report addresses how far we still need to go in closing the gap between vulnerability and security,” she added. — Bernama