Utilities ignorant of IT security despite pounding by hackers: Ponemon

[InfoSec News <alerts () infosecnews org>]

http://www.cso.com.au/article/551228/utilities_ignorant_it_security_despite_pounding_by_hackers_ponemon/

By David Braue
CSO Online (Australia)
30 July, 2014

Security pundits have warned of the imminent hacking threat to critical 
infrastructure providers, but a new Ponemon Institute survey of 
infrastructure operators suggests the threat is already here.

The survey found 86 per cent of executives reporting they suffered at 
least one security breach, leading to a loss of confidential information 
or disruption of their operations, over the past 12 months.

The A/NZ figure was considerably higher than the nearly 70 per cent of 
executives globally reporting an attack, suggesting that this region has 
fallen behind the world in terms of data protection. Fully 24 per cent of 
respondents said the security breaches were due to an insider attack, or 
to negligent privileged IT users.

Despite such a high rate of security incidents, only 17 per cent of 
companies in the Critical Infrastructure: Security Preparedness and 
Maturity report – which was sponsored by Unisys and included 599 IT and IT 
security executives at infrastructure companies in 13 countries – had 
deployed most of their IT security program.

[...]

--
Evident.io - Continuous Cloud Security for AWS.
Identify and mitigate risks in 5 minutes or less.
Sign up for a free trial @ https://evident.io/