The gap between real and perceived security risks
Keith Barker · Computer Fraud & Security · 2014
The disconnect between perceived and actual risk is astounding. According to the 11th Annual Global Information Security Survey, 84% of CEOs and 82% of CIOs contend their cyber-security programmes are effective. 1 Yet the number of security incidents detected is rising significantly year-over-year, and the number of organisations reporting losses of more than $10 million per incident is up 75% from just two years ago. The disconnect between perceived and actual risk is astounding. Most CEOs and CIOs contend their cyber-security programmes are effective, yet the number of security incidents is rising significantly. The solution starts at the top, with clear policies that are communicated right down through the organisation. But those policies also have to take account of user behaviours and changing technology, such as the Bring Your Own Device phenomenon, explains Keith Barker.