Saturday 7 April 2007

A new survey found that the third of UK businesses fail to report security crimes and breaches

According to a new survey by Infosecurity Europe 2007, which involved about 285 large organizations in UK, almost the third of these businesses don't report information security crimes and breaches. The survey discovered also that IT managers are faced with a very difficult choice in whether or not to report any security crime.

Managers have to weigh between their responsibility to report security crimes in order to prevent similar incidents in the future and the effects of reporting these incidents on their reputation amoing their customers and hackers.

Nevertheless according to Jonathan Coad the media lawyer from Swan Turton "From my experience as a media lawyer, reporting crime to the police is a double edged sword as invariably the press have found out about the incident within 24 hours of reporting it to the police, creating a real PR risk."

However Phillip Virgo, the Secretary General of think tank Eurim stated that "The time has come to respond to the needs of the customer for security tools they can understand, realistic advice, guidance and support on how to use them and for reporting systems that will route their enquiry to some-one who will respond - be it law enforcement or technical support,"

Source of the news

No comments: