Promisec Survey Reveals Top Threats

NEW YORK -- Promisec™ Ltd, a specialist in clientless endpoint security management (CESM) technology, today revealed findings from audits performed at 32 large organizations covering 193,000 corporate endpoints. The results from these findings indicate the prevalence of unauthorized software, rogue processes and endpoint security gaps that have the potential for significant security issues at the nations largest organizations.

Findings of the Promisec summary audit revealed that 25,090 (13%) of the corporate PCs surveyed had unauthorized USB devices attached to them, opening the door to data loss and the opportunity for USB-borne viruses and malware to enter the corporate network. 7720 (4%) of corporate PCs had peer-to-peer (P2P) applications installed, such as KaZaA. 2895 (1.5%) of the corporate PCs did not have the latest Microsoft service packs and 3281 (1.7%) had anti-virus monitoring and remediation issues. 2316 (1.2%) of the 193,000 audited endpoints were without required 3rd party desktop security agents. Finally, 1579 (.82%) of endpoints had unauthorized remote control software such as GoToMyPC, and a lesser percentage had unauthorized and unprotected shareware.

Promisec Ltd. regularly conducts comprehensive security audits at customer sites to identify the prime threats to internal network security, originating at endpoints enterprise-wide. The audit takes less than an hour after implementation of Promisec Spectator for Enterprises, installed on a single enterprise workstation. The software’s ability to perform discovery and provide reporting across all corporate networks produces a detailed synopsis of processes, devices and other activities on the network which may be outside of corporate policy, revealing the current state of internal network security. As revealed in these findings, data loss and illegal software introductions are the two largest threats, driven by the unauthorized connection of USB-attached mass storage devices.

“Organizations are becoming more adept at identifying security threats to their external networks, but internal network security issues represent a substantial problem for businesses challenged with preventing loss of corporate IP and the infiltration of their networks by malware inadvertently introduced by employees and business partners,” said Amir Kotler, CEO of Promisec. “The answer to this problem is first understanding the magnitude of it. The loss of internal financial data, customer lists and proprietary product details can be devastating while the introduction of malware can significantly slow down business efficiency – all of which can be prevented by implementing a strong endpoint security strategy.”

Promisec Ltd.