Home > Articles > Security is Fine, Users are not

Security is Fine, Users are not

May 25th, 2005

Network administrators are comfortable with security at their business in such areas as desktop PCs, remote access, physical security, and data centers, but concerned about their users, who through their ignorance and errors remain a significant cause of security vulnerabilities.

The recently published research, conducted by Amplitude Research, surveyed network professionals about their abilities to protect the enterprise. Those who expressed that they are “losing sleep” about security management issues indicated that much of their angst stems not from attacks coming from outside the enterprise, but from employees.

The survey findings are: 70 percent expressed satisfaction with data centers/server farms security, 8 percent of network administrators indicate that they use internal staff and resources, 10 percent said they employ a security consultant to advise and assist internal staff, 2 percent said they outsource to a managed service provider or consulting firm, 10 percent said they are assembling information security tools from a single source for a turnkey solution and 81 percent indicate they mix-and-match from multiple sources.

Those respondents that expressed concerns about their users selected a “failure to adhere to company security policies” (40%) as their most important concern, followed by “insufficient training time or budget” (28%) and “no mandate from top management” (23%).

“This year´s survey responses pointed toward a sentiment among network administrators and networking managers that they are generally satisfied with the level of security at their organizations, and are focused on issues such as security breaches, securing remote access, recovery plans, and virus or worm outbreaks, “ Steve Birnkrant, CEO of Amplitude Research.

“Overall, network administrators expressed significantly higher levels of satisfaction with security at data centers and with desktop PCs than the use of wireless LANs, handheld devices, laptops, or the physical security at their workplace.”

Articles

Comments are closed.