Cisco study: IT security policies unfair

Unfair policies prompt most employees to break company IT security rules.

Unfair policies prompt most employees to break company IT security rules, and that could lead to lost customer data, a Cisco study found.

Cisco this week released a second set of findings from a global study on data leakage. The first part dealt with common employee data leakage risks and the potential impact on the collaborative workforce.

Part two deals with the 'whys' of behavior that raises the risk of corporate data leakage. More than half of the employees surveyed admitted that they do not always adhere to corporate security polices.

And when they don't, it can lead to leakage of sensitive data. Of the IT respondents who dealt with employee policy violations, one in five reported that incidents resulted in lost customer data, according to the Cisco study.

The surveys were conducted of more than 2,000 employees and IT professionals in 10 countries: the United States, the United Kingdom, France, Germany, Italy, Japan, China, India, Australia and Brazil. They were executed by InsightExpress, a US-based market research firm, and commissioned by Cisco.

The study found that the majority of employees believe their companies' IT security policies are unfair. Indeed, surveyed employees said the top reason for non-compliance is the belief that policies do not align with the reality of what they need to do their jobs, according to Cisco.

The study found that the majority of employees in eight of 10 countries felt their company's policies were unfair. Only employees in Germany and the United States did not agree.

In Germany, even though the majority of employees felt their companies' policies were fair, more than half of them said they would break rules to complete their jobs, the study found. Of all the countries, France (84 percent) has the most employees who admitted defying policies, whether rarely or routinely.

In India, one in 10 employees admitted never or hardly ever abiding by corporate security policies. Overall, the study found that 77 percent of companies had security policies in place.

But defiance may not be intentional. IT and employees have a disconnect when it comes to policy and adherence awareness, the study found.

IT believes employees defy policies for a variety of reasons, from failing to grasp the magnitude of security risks to apathy; employees say they break them because they do not align with the ability to do their jobs.

But IT could do a better job communicating those policies. The study found that, depending on the country, the number of IT professionals who knew a policy existed was 20 to 30 percent higher than the number of employees.

The largest gaps -- 31 percent -- were in the United States, Brazil and Italy.

CHANNEL CHOICE: Vote Now for your favourite in the three categories: Vendor, Distributor and Reseller. Voting closes August 8.

More about Cisco

ARN Directory | Distributors relevant to this article


Comments are now closed


Latest News

Xiaomi's Mi4 brings a touch of Apple to the open world of Android
Scott Leader new executive director A/NZ for Pegasystems
Zendesk expands Melbourne operation
Planet Tel acquires Via IP to move into wholesale aggregation
More News
23 Jul
Dell Connected Security: Listen to what the experts have to say about security
24 Jul
The Rise of the Challenger Marketer
24 Jul
Veeam’s Crazy 8 Roadshow
24 Jul
Executive Sales Breakfast Briefing
View all events