Menu
Cisco study: IT security policies unfair

Cisco study: IT security policies unfair

Unfair policies prompt most employees to break company IT security rules.

Unfair policies prompt most employees to break company IT security rules, and that could lead to lost customer data, a Cisco study found.

Cisco this week released a second set of findings from a global study on data leakage. The first part dealt with common employee data leakage risks and the potential impact on the collaborative workforce.

Part two deals with the 'whys' of behavior that raises the risk of corporate data leakage. More than half of the employees surveyed admitted that they do not always adhere to corporate security polices.

And when they don't, it can lead to leakage of sensitive data. Of the IT respondents who dealt with employee policy violations, one in five reported that incidents resulted in lost customer data, according to the Cisco study.

The surveys were conducted of more than 2,000 employees and IT professionals in 10 countries: the United States, the United Kingdom, France, Germany, Italy, Japan, China, India, Australia and Brazil. They were executed by InsightExpress, a US-based market research firm, and commissioned by Cisco.

The study found that the majority of employees believe their companies' IT security policies are unfair. Indeed, surveyed employees said the top reason for non-compliance is the belief that policies do not align with the reality of what they need to do their jobs, according to Cisco.

The study found that the majority of employees in eight of 10 countries felt their company's policies were unfair. Only employees in Germany and the United States did not agree.

In Germany, even though the majority of employees felt their companies' policies were fair, more than half of them said they would break rules to complete their jobs, the study found. Of all the countries, France (84 percent) has the most employees who admitted defying policies, whether rarely or routinely.

In India, one in 10 employees admitted never or hardly ever abiding by corporate security policies. Overall, the study found that 77 percent of companies had security policies in place.

But defiance may not be intentional. IT and employees have a disconnect when it comes to policy and adherence awareness, the study found.

IT believes employees defy policies for a variety of reasons, from failing to grasp the magnitude of security risks to apathy; employees say they break them because they do not align with the ability to do their jobs.

But IT could do a better job communicating those policies. The study found that, depending on the country, the number of IT professionals who knew a policy existed was 20 to 30 percent higher than the number of employees.

The largest gaps -- 31 percent -- were in the United States, Brazil and Italy.

Follow Us

Join the ARN newsletter!

Error: Please check your email address.

Upcoming

Slideshows

IN PICTURES: 2015 Microsoft Australia Partner Awards (+32 photos)

IN PICTURES: 2015 Microsoft Australia Partner Awards (+32 photos)

The achievements of Microsoft’s Australian partners over the past year have been recognised through a number of prestigious awards announced at the 2015 Microsoft Australia Partner Conference (APC) on the Gold Coast. The Microsoft Australia Partner Awards showcased partners delivering innovative solutions and services to customers, with many embracing Microsoft’s Cloud solutions. Awards were presented in 17 categories. The winners were chosen from more than 170 nominations. With more than 11,000 partners in Australia it was a competitive field. Photos by ARN Editor, ALLAN SWANN.

IN PICTURES: 2015 Microsoft Australia Partner Awards (+32 photos)
IN PICTURES: ESET Security launch Hobart (+26 photos)

IN PICTURES: ESET Security launch Hobart (+26 photos)

It was a good turnout for ESET’s Security launch event in Hobart, with over 25 partners from across the state turning out for the Slovakian security company’s first trip to the Apple Isle. Attendees enjoyed some fine local cheese and wine and saw presentations from ESET Australia managing director, Florin Vasile and business development manager, Edmund Li. Photos courtesy of Catalin Photography.

IN PICTURES: ESET Security launch Hobart (+26 photos)
IN PICTURES: Nutanix's .NEXT channel event in Sydney (+20 photos)

IN PICTURES: Nutanix's .NEXT channel event in Sydney (+20 photos)

Nutanix recently held its customer and channel event, .NEXT, in Sydney. The event, held at the Sheraton on the Park saw attendance from more than 150 channel and technology partners and customers. It was the first in a series of events Nutanix is holding in A/NZ in August and September, the objective of which is to brief partners and customers on “what’s next” in the design and management of datacentre technology.

IN PICTURES: Nutanix's .NEXT channel event in Sydney (+20 photos)

iasset.com is a channel management ecosystem that automates all major aspects of the entire sales, marketing and service process, including data tracking, integrated learning, knowledge management and product lifecycle management.

Show Comments