Fergie's Tech Blog

Data Loss: Companies Still Failing to Enforce Security Rules

Matt Hines writes on InfoWorld's "Zero Day Security" Blog:

Creating the most comprehensive and restrictive security policies in the world won't do your company any good if you don't enlist means of enforcing them.

Should this be news?

One might think not, but apparently -- based on a new study published by Ponemon Institute and sponsored by DLP vendor RedCannon -- many companies are failing to implement their existing security rules, or express them in a manner that actually drives users to obey them.

Based on a survey of just under 900 corporate IT workers, the researchers found that many people believe that they can continue to skirt their employers' security laws, in those cases where they have even been made aware of them.

posted by Fergie @ 12/04/2007 05:24:00 PM