CEOs underestimate security risks, survey finds

[OhioChick]

Lower-level execs more likely to fear the worst from attacks on corporate data

July 15, 2009 05:44 PM ET

Computerworld - Compared to other key corporate executives, CEOs appear to underestimate the IT security risks faced by their own organizations, according to a survey of C-level executives released today by the Ponemon Institute.

The Ponemon survey (download PDF) of 213 CEOs, CIOs, COOs and other senior executives reveals what appears to be a perception gap between CEOs and other senior managers concerning information security issues. For instance, 48% of CEOs surveyed said they believe hackers rarely try to access corporate data. On the other hand, some 53% of other C-level executives believe that their company's data is under attack on a daily or even hourly basis.

The survey also found that the top executives were less aware of specific security incidents at their companies than other C-level executives and are more confident that data breaches can be easily avoided.

Ponemon found that CEOs tend to view data protection efforts as vital to maintaining good customer satisfaction levels and to the company's brand image. The other managers, however, were more likely to say that the most important role for data security efforts is to satisfy regulatory requirements.

The survey also found that CEOs and other top managers differed in their opinion of who is responsible for protecting corporate data.

More: http://www.computerworld.com/s/article/9135569/CEOs_underestimate_security_risks_survey_finds

Nice...