Survey Highlights Security Policy Challenges

SAN FRANCISCO -- In a recent survey of 113 ITsecurity professionals, 51% percent stated that their organization'ssecurity policies do not have clear consequences for security violations,highlighting the challenges in creating and implementing a coherentsecurity policy. nCircle, the leading provider of agentless security riskand compliance management solutions, conducted the survey from May 7 toAugust 16, 2007.

(Logo: http://www.newscom.com/cgi-bin/prnh/20051214/SFW028LOGO)

The full poll results are:
Does your organization have clear consequences for security policyviolations?
Yes: 49%
No: 51%
Total votes: 113

According to Andrew Storms, Director of IT Security for nCircle, "It'sinteresting that these results are nearly evenly split. This reflects thechallenge of maintaining a corporate policy that matches a continuouslychanging threat environment. It also reflects the challenge of applyingthat policy when every infraction involves a different level of risk and awide variety of human factors."

nCircle