Information Security Victim to IT Trends

by Steve O'Keefe on November 9, 2010

Lured by the prospect of reduced costs, more companies are putting their information assets at risk by embracing technology trends such as cloud computing. A new survey finds that companies are failing to assess these risks and take defensive measures.

Consulting giant Ernst & Young released its 13th annual Global Information Security Survey last week, and the privacy picture that emerges is not good. The Vancouver Sun summarizes the findings this way:

Less than a third of global businesses have an IT risk management program capable of addressing the risks related to the use of new technologies… In spite of the rapid emergence of new technology, just one in ten companies consider examining new and emerging IT trends a very important activity for the information security function to perform.

What are the IT trends eroding information security at major corporations?

Mobile Computing, including smartphones, tablets, and laptop computers: “Devices that can contain information are increasingly prevalent; they are used for both work and home purposes, blurring the lines between the two, and results in ceding of control over the devices and the information to employees, service providers and others.”

Cloud Computing, including Software-as-a-Service (SaaS): “While organizations may have chosen in the past to avoid cloud technologies and the possible privacy and security challenges they bring about, in this economic climate, the cost reduction benefits that such solutions offer have brought many organizations to reassess whether these transformational technologies are right for them.”

Social Networking and other “Web 2.0” technologies: “60% perceive increased risk from the use of social networking.”

In their new book, MINITRENDS, John and Carrie Vanston cite increased interest in privacy as one of the most promising areas for entrepreneurial activity in the coming two-to-five years:

In general, communications and computer technologies designed to gather personal information have progressed more rapidly and dramatically than those designed to protect this information. Serious efforts are being expended, however, to develop protection technologies.

The authors suggest some of the avenues for Minitrend development, including making it easier for employees to use privacy-protection software and teaching employees how to protect sensitive information. This insight is bolstered by the Ernst & Young report, in which a whopping 92% of respondents indicate that employee awareness of security issues is a problem.

Information security was a lot easier when it was a matter of protecting the perimeter around a company’s information assets. But in today’s economy, those information assets are widely distributed and stored in the hands of employees and outside vendors, making it much more difficult for organizations to protect them. Clearly, Ernst & Young’s shocking report shows tremendous opportunity for innovators and entrepreneurs who can develop technological solutions to modern privacy problems.

STEVE O’KEEFE
News Editor, Minitrends Blog

Source: “Ernst & Young Report Reveals Companies Unprepared to Address Risks Created by New Technology,” The Vancouver Sun, 11/04/10
Source: “Top privacy issues for 2010,” Ernst & Young, 02/10
Source: “Emerging Technology Trends Increase Risks of Protecting Corporate Information,” PR Newswire, 11/04/10
Source: MINITRENDS: How Innovators & Entrepreneurs Discover & Profit From Business & Technology Trends, Technology Futures, Inc., p. 95.
Photo by D. Sharon Pruitt (Pink Sherbet Photography), used under its Creative Commons license.

Comments