| According to new research claims, UK companies are increasingly aware of the importance of information security policies, but such policies are being widely ignored by staff.
A warning by Pricewaterhousecoopers that tightening information security means changing people’s behaviour. Seven out of eight large companies have IT security problems, according to a survey carried out on behalf of the Department for Business, Enterprise & Regulatory Reform (DBERR).
9% of companies do not allow their staff internet access were as other companies are placing greater trust in their staff and want employees to use technology to improve their effectiveness, with the proportion of business restricting internet access to some staff.
Chris Potter, a partner at PricewaterhouseCoopers, says: “Having a security policy alone does not magically improve security awareness among staff. The overwhelming majority of companies take steps to raise awareness. What companies are realising is that increasing security awareness is only part of the answer; the critical issue is changing the behaviour of their people."
The survey also showed that staff are increasingly targeted by social engineering attacks in which outsiders try to obtain confidential information on these sites.
Businesses are also becoming increasingly concerned about what is being said about them on social networking sites, and some staff have posted confidential information on these sites.
Chris Crawford is the MD of BD Recruitment a specialist recruiter for the creative, marketing and technical industries, based in Manchester, UK. |