Cisco study: IT security policies unfair

Unfair policies prompt most employees to break company IT security rules.

Unfair policies prompt most employees to break company IT security rules, and that could lead to lost customer data, a Cisco study found.

Cisco this week released a second set of findings from a global study on data leakage. The first part dealt with common employee data leakage risks and the potential impact on the collaborative workforce.

Part two deals with the 'whys' of behavior that raises the risk of corporate data leakage. More than half of the employees surveyed admitted that they do not always adhere to corporate security polices.

And when they don't, it can lead to leakage of sensitive data. Of the IT respondents who dealt with employee policy violations, one in five reported that incidents resulted in lost customer data, according to the Cisco study.

The surveys were conducted of more than 2,000 employees and IT professionals in 10 countries: the United States, the United Kingdom, France, Germany, Italy, Japan, China, India, Australia and Brazil. They were executed by InsightExpress, a US-based market research firm, and commissioned by Cisco.

The study found that the majority of employees believe their companies' IT security policies are unfair. Indeed, surveyed employees said the top reason for non-compliance is the belief that policies do not align with the reality of what they need to do their jobs, according to Cisco.

The study found that the majority of employees in eight of 10 countries felt their company's policies were unfair. Only employees in Germany and the United States did not agree.

In Germany, even though the majority of employees felt their companies' policies were fair, more than half of them said they would break rules to complete their jobs, the study found. Of all the countries, France (84 percent) has the most employees who admitted defying policies, whether rarely or routinely.

In India, one in 10 employees admitted never or hardly ever abiding by corporate security policies. Overall, the study found that 77 percent of companies had security policies in place.

But defiance may not be intentional. IT and employees have a disconnect when it comes to policy and adherence awareness, the study found.

IT believes employees defy policies for a variety of reasons, from failing to grasp the magnitude of security risks to apathy; employees say they break them because they do not align with the ability to do their jobs.

But IT could do a better job communicating those policies. The study found that, depending on the country, the number of IT professionals who knew a policy existed was 20 to 30 percent higher than the number of employees.

The largest gaps -- 31 percent -- were in the United States, Brazil and Italy.

CHANNEL CHOICE: Vote Now for your favourite in the three categories: Vendor, Distributor and Reseller. Voting closes August 8.

More about Cisco

ARN Directory | Distributors relevant to this article


Comments are now closed


Latest News

Newcastle Council deploys TechnologyOne enterprise solution
Vodafone re-allocates 850MHz 4G spectrum a week after Telstra and Optus 700MHz l...
Sitecore tackles Western Australia with Velrada partnership
Email to make way for automation: KPMG
More News
05 Aug
Systems Technology Day - Build Your Own Private Cloud
06 Aug
Oracle Employee Experience Journey Mapping Workshops
20 Aug
Westcon Group Imagine 2014 - Melbourne
21 Aug
CAST 611 Advanced Penetration Testing
View all events