The 2011 State of Security Survey reveals that cybersecurity is increasingly recognized as a critical business risk, with many organizations witnessing rising cyberattacks and significant associated costs. Mobile computing, social media, and the consumerization of IT are major drivers behind evolving security challenges, with common threats identified as hackers and targeted attacks. Businesses are responding by increasing budgets and staffing in security areas such as network and web security while implementing strategies to protect their information and infrastructure.

1. 2011 State of Security Survey
Global Key Findings

2. Methodology
• Survey performed by Applied Research
• 3,300 global organizations
– SMBs: Individuals in charge of IT resources
– Enterprises: Tactical IT, Strategic IT
and C-level professionals
• Cross-industry
2

3. Key Findings
• Cybersecurity is important to businesses
• The drivers of security are changing
• Details about cyberattacks for businesses
• What are businesses doing about security?
3

4. Cybersecurity Important to Businesses
• Biggest business risk – well ahead of natural disasters and terrorism
4

5. Cybersecurity Important to Businesses
More than one third see security somewhat/significantly more important than
12 months ago
5

6. What Is Driving Security?
Industry trends driving security challenges
• Mobile computing
• Social media
• Consumerization of IT
6

7. What Is Driving Security?
Most significant security threats
• Hackers
• Well-meaning insiders
• Targeted attacks
7

8. Details About Cyberattacks for Businesses
• Nearly three-quarters saw attacks
• About 21% see frequency increasing
8

9. Details About Cyberattacks for Businesses
Top attack vectors:
• Malicious code
• Social engineering
• External malicious attacks
Fastest growing attack vectors:
• Malicious code
• Social engineering
• External malicious attacks
9

10. Details About Cyberattacks for Businesses
• Most (92%) saw losses from cyberattacks
• Downtime, employee PII, intellectual
property and customer PII most common
losses
• Most cases (84%), losses translated into
actual costs
• Productivity; revenue; lost organizational,
customer or employee data; and brand
reputation were highest costs
• 80% of businesses lost at least $195,000
as a result of cyberattacks
10

11. What Are Businesses Doing About Security?
Doing best with routine security – innovation and strategic initiatives, not quite
as well
11

12. What Are Businesses Doing About Security?
Areas of growth in staffing:
• Network security
• Web security
• Endpoint security
Areas of growth in budgets:
• Network security
• Web security
• Security systems management
12

13. Symantec Recommendations
• Develop and enforce IT policies
• Protect the information
• Validate and protect identities
• Manage systems
• Protect the infrastructure
13