Cisco study: IT security policies unfair

Unfair policies prompt most employees to break company IT security rules.

Unfair policies prompt most employees to break company IT security rules, and that could lead to lost customer data, a Cisco study found.

Cisco this week released a second set of findings from a global study on data leakage. The first part dealt with common employee data leakage risks and the potential impact on the collaborative workforce.

Part two deals with the 'whys' of behavior that raises the risk of corporate data leakage. More than half of the employees surveyed admitted that they do not always adhere to corporate security polices.

And when they don't, it can lead to leakage of sensitive data. Of the IT respondents who dealt with employee policy violations, one in five reported that incidents resulted in lost customer data, according to the Cisco study.

The surveys were conducted of more than 2,000 employees and IT professionals in 10 countries: the United States, the United Kingdom, France, Germany, Italy, Japan, China, India, Australia and Brazil. They were executed by InsightExpress, a US-based market research firm, and commissioned by Cisco.

The study found that the majority of employees believe their companies' IT security policies are unfair. Indeed, surveyed employees said the top reason for non-compliance is the belief that policies do not align with the reality of what they need to do their jobs, according to Cisco.

The study found that the majority of employees in eight of 10 countries felt their company's policies were unfair. Only employees in Germany and the United States did not agree.

In Germany, even though the majority of employees felt their companies' policies were fair, more than half of them said they would break rules to complete their jobs, the study found. Of all the countries, France (84 percent) has the most employees who admitted defying policies, whether rarely or routinely.

In India, one in 10 employees admitted never or hardly ever abiding by corporate security policies. Overall, the study found that 77 percent of companies had security policies in place.

But defiance may not be intentional. IT and employees have a disconnect when it comes to policy and adherence awareness, the study found.

IT believes employees defy policies for a variety of reasons, from failing to grasp the magnitude of security risks to apathy; employees say they break them because they do not align with the ability to do their jobs.

But IT could do a better job communicating those policies. The study found that, depending on the country, the number of IT professionals who knew a policy existed was 20 to 30 percent higher than the number of employees.

The largest gaps -- 31 percent -- were in the United States, Brazil and Italy.

2015 State of The IT Channel Survey : IT'S TIME!!! Fill in this year's State of the IT Channel Survey and be in the running to win great prizes. CLICK HERE

Join the ARN newsletter!

Error: Please check your email address.

More about Cisco

ARN Directory | Distributors relevant to this article

Show Comments

Latest News

Aussie appetite for fast broadband proves to be insatiable
Dicker Data partners NEXTDC to provide "affordable" Cloud solutions
There should be a ‘when, not if’ approach to security issues in the channel: Log...
Huawei's Australian enterprise business posts triple digit revenue growth
More News
14 Apr
Dell Solutions Tour Melbourne
15 Apr
LIVE WEBCAST Websense 2015 Threat Report: 8 High-Risk Lessons
21 Apr
APJ Progress Spark Conference
22 Apr
2015 Innotribe Startup Challenge
View all events