Share it !
Many of today's small businesses use PCs and a server network to facilitate their operations. Important company information is stored in electronic format on these networks, and daily operations are dependent on the network being both available and secure. In many cases, these small businesses ignore or are unaware of the risks that could compromise the safety of the data. To better understand these issues, two hundred of these small businesses were interviewed about their network security. Companies ranged from those with ten employees or less, to those with over a hundred staff members.
Over half of the survey respondents believed that their network was adequately safe or very secure. A large number of respondents did admit that they doubted their defenses against an attack. This isn't too surprising, as nearly all businesses have experienced some type of security threat in the last year, from lost computers or back-up takes, hacker attacks, viruses, or theft by employees.
The top three threats reported were:
1) Trojan horse or virus attacks
2) Stolen or lost computers, including data storage devices
3) Employee theft or hacker attack
Company defenses reported include:
1) Virus Protection
2) Firewall
3) Spyware Protection
4) Spam Filters
Recommendations:
Most companies reported that they lacked a smart password policy, automated patch management, and employee network use policies. Generally, many of these businesses don't have full protection against an attack, and have not yet had to put their defenses to the test.
There isn't one single fix to ensure secure continuity of operations on a network. However, we recommend a layered approach in managing these pressing security threats. This layered approach examines vulnerability in different areas including hardware, software, processes, and training. Every layer added another level of protection to the information environment.
1) Blocking network-based attacks
2) Blocking host-based attacks
3) Eliminating vulnerability
4) Supporting authorized users safely
5) Tools for maximizing effectiveness and minimizing losses
To assure the continuity of your business operations, regular testing of these security measures is required.
Level of Overall Security:
Over half the respondents stated that they thought their network was secure enough or better. 30% of the remainder thought their network was only somewhat secure, and over 10% confided that their network was not as secure as it should be.
These small businesses tend to believe that their network is relatively secure: 63% of businesses with less than ten employees and almost 75% of those with between eleven and twenty-five staff members. The larger companies were not as sure of their defenses, with over half of those with fifty to one hundred and 44% of those with over a hundred employees felt secure or secure enough. In the fifty-one to one hundred staff category, over 20% reported that the network was not as secure as should be. In general, the bigger the company, the larger the network - and the greater the number of security risks it must defend against.
Experienced Threats:
The respondents reported on security lapses or attacks that they'd experienced over the last year. The survey showed that Trojan horses or virus attacks are the most common threat to the network, with about half reporting experiences with these issues in that time. The larger companies reported at 40%, the lowest rate, which is indicative of better defenses. Over 60% of the smallest companies reported virus-based attacks. Loss of company information from theft or loss of storage devices appeared to be a minor threat for smaller companies, but this risk increases with company size. Over 33% of the larger firms reported this sort of experience. Hacker attacks were most often experienced by firms with less than ten employees and those with over a hundred. It seems the smaller networks are more vulnerable, and the largest ones are high-profile, with a greater chance of becoming a target. Unfortunately, staff members can create a security risk themselves; about 10% of businesses reported that they had experienced unauthorized access or theft in the allotted time frame.
Devices and Procedures:
Good procedures, processes and systems can help defend against security threats. In the survey, respondents were asked which security methods were in use. Most reported that they had virus protection and firewalls. Around 25% lacked spam filters and spyware removal, leaving networks open to malware which ranges from dangerous to annoying. Under 50% have patch management or a smart password policy in place. This smart password system uses passwords with a mixture of normal and special characters which are frequently changed. As compared to the largest companies surveyed, smaller businesses are less-often implementing network use policies for employees. Over 80% of the larger companies have defined guidelines for proper and improper network use. These guidelines attempt to lower the amount of network activity unrelated to the business, which result in increased security risk. Many of the respondents use wireless networks. Wireless networks are some of the most vulnerable access points if not well-secured. Only a few companies reported that they use all the top-priority security measures listed in the survey.
Testing:
No security device or feature can be known to provide real defense until it's been tested. Anti-virus specifications could be out of date, a hole could exist within a firewall, or staff members could not be using the correct practices for a safe and secure network. About 25% of respondents indicated that either they couldn't remember the last time they tested their security, or didn't know that they ever had. This seems to indicate that while many have implemented security defenses, they can't be assured that the expected protection is actually provided. The very smallest companies least-often tested their security measures. About 10% of businesses had tested security, but not for over a year. As the threats change over time, dangerous lapses can occur without periodic testing. Around 33% of respondents reported that they'd tested their security measures within the last month. Validation of network security elements on a regular basis is important to system integrity in an overall continuity plan. It is unfortunate that usually a company only examines its level of exposure after a damaging event which negatively affects the business.
Nick Pegley is a marketing expert with All Covered: Technology Services Partner for Small Business, providing information technology consulting and IT services in 20 major U.S. metro areas. Outsource your procurement, installation and technical headaches..
PHILADELPHIA--(BUSINESS WIRE)-- Comcast Corporation (Nasdaq:CMCSA - News), announced today the findings of its Internet safety and security survey to assess the general knowledge, attitudes and behaviors among U.S. adults and teens. One of the highlights in the independent nationwide survey revealed that although 95 percent of parents believe it is just as important to talk about online safety issues with their children as it is to talk about sex education and the risks associated with drugs and alcohol, only 65 percent have actually had that discussion.
To help parents initiate these conversations with their children as they progress through different developmental stages - teens, tweens, school-age children and preschoolers, Comcast is raising awareness about new discussion guides created by Dr. Michael Rich, Director of the Center on Media and Child Health at Children’s Hospital Boston. The results of the survey and the new guides come as the nation recognizes National Cyber Security Awareness month in October.
“As the nation’s largest residential Internet service provider, we want to continue to provide tips and resources on ways consumers can stay safe online,” said Cathy Avgiris, Senior Vice President and General Manager of Communications and Data Services for Comcast Cable. “Some of the survey results were surprising because they showed that parents and teens may not be on the same page on a variety of online safety issues. As a result, we want to raise awareness about great resources for parents, teachers and caregivers to talk about how to be safe online with their kids or loved ones.”
Among other findings, the survey revealed that when using the Internet, 65 percent of parents say online security and safety is most important to them compared to only 46 percent of surveyed teens. This suggests teens are underestimating or are not fully aware of some of the risks associated with their online activities.
“Because a child’s exposure to and use of the Internet changes over time, it was important to create conversation starter guides for parents that represent the different stages of a child’s life,” said Dr. Rich. “For example, you can’t talk to a preschooler about the Internet the same way you would talk to a teen about the Internet. The short and simple guides that have been developed can help parents navigate talks about things like safety, the amount of time spent online and appropriate online behavior.”
The guides are available to everyone, not just Comcast customers, and can be downloaded for free at http://xfinity.comcast.net/constantguard/Education/For_Parents/The_Internet_Talk/?CID=661 or at the Center for Media and Child Health website at http://www.cmch.tv.
Additional survey highlights include:
Across various Internet-connected devices, including personal computers, laptops, tablets and smart phones, teens feel safer online compared to parents. Thirty-nine percent of teens feel their personal data is very safe and secure on a personal computer or a laptop compared to 25 percent of parents. For smart phones in particular, more than twice as many teens as parents believe their data is safe from hackers or cybercriminals. Teens’ use of passwords is riskier than parents. Teens are much more likely to use the same password for every online account than are parents. Twenty-three percent of surveyed teens report that they use the same password for their online accounts compared to 14 percent of surveyed parents. Roughly two-thirds of parents (66 percent) and teens (61 percent) believe they are in full control of what they post online and can take it down whenever they want. In fact, most parents and teens do not understand the reality that what goes online, stays online – and nearly three in 10 teens have posted something online that they later regretted. Parents vary on the appropriate age for a child to start using the Internet. Thirty-six percent of parents surveyed believe the appropriate age for a child to start accessing the Internet is between the ages of 10 and 13; 35 percent of parents believe the appropriate age is between 6 and 9 and 12 percent of parents think a child 5 years old and under is the appropriate age to start using the Internet. Parents are not aware of what their children are downloading on the Internet. Sixty-eight percent of teens surveyed say that they have downloaded a program or software without their parent’s permission. However, only 35 percent of parents surveyed believe that their children have ever downloaded a program or software without their permission.For more tips about Internet safety and to download four different Internet safety conversation starters, please visit http://xfinity.comcast.net/constantguard/Education/For_Parents/The_Internet_Talk/?CID=661.
For additional survey results, please visit: http://www.comcast.com/MediaLibrary/1/1/About/PressRoom/Documents/pdf/InternetSurveyChartsOct2011.pdf
Earlier this year, Comcast launched the Constant Guard? Protection Suite, the most comprehensive suite of online security and safety of any major Internet service provider in the U.S. The addition of the Constant Guard Protection Suite for Xfinity Internet customers and “The Internet Talk” guides for all consumers are further examples of Comcast’s continued efforts to promote Internet safety awareness and education. In addition, Comcast recently began rolling out Internet Essentials?, a program which offers families with children who are eligible to receive free lunches under the National School Lunch Program low-cost Internet service, affordable computers and digital literacy training.
About Comcast Corporation
Comcast Corporation (Nasdaq:CMCSA - News) (www.comcast.com) is one of the nation's leading providers of entertainment, information and communications products and services. Comcast is principally involved in the operation of cable systems through Comcast Cable and in the development, production and distribution of entertainment, news, sports and other content for global audiences through NBCUniversal. Comcast Cable is one of the nation's largest video, high-speed Internet and phone providers to residential and business customers. Comcast is the majority owner and manager of NBCUniversal, which owns and operates entertainment and news cable networks, the NBC and Telemundo broadcast networks, local television station groups, television production operations, a major motion picture company and theme parks.
*SURVEY CONDUCTED BY AN INDEPENDENT RESEARCH FIRM, PENN SCHOEN BERLAND (PSB) ON BEHALF OF COMCAST. NATIONWIDE 1,610 INDIVIDUALS WERE SURVEYED.
Photos/Multimedia Gallery Available: http://www.businesswire.com/cgi-bin/mmg.cgi?eid=50019925&lang=en
MULTIMEDIA AVAILABLE: http://www.businesswire.com/cgi-bin/mmg.cgi?eid=50019925?=en
