Current Filter: Security>>>>>News>

   

The survey also found that, in the event of a breach, only 25% of professionals would see the best course of action as telling the regulator and paying the fine. Some key findings from this study include:

20% of respondents have witnessed a company hide or cover up a breach.

Over half of security professionals utilise hacker forums or associate with blacklist to keep abreast of the latest threats and technologies

Most believe the CISO (chief information security officer) should be ultimately accountable for a breach

Security breaches are used as leverage to increase security budgets.

Many companies are realising that being breached or suffering an incident is part of the cost of business, says AlienVault. "However, when the inevitable does occur, the security teams still find themselves under considerable pressure, which can contribute to breaches being hidden or vulnerabilities ignored."

Information security," argues Javvad Malik, security advocate for AlienVault, "is still a comparatively immature industry." He fears that the rapid growth of the industry in such a short timeframe has forced security professionals to "make up the playbook as they go along, evidenced by inconsistent disclosure practices, as well as the ever-changing and complex legal path to navigate".