Survey Finds Businesses Don't Follow ''Simple Computer Security Tips''
Use of Easy-to-Guess Passwords, Improper Data Back-up Procedures Biggest Lapses
SAN JOSE, Calif.--(BUSINESS WIRE)--May 10, 2004--Secure Computing Corporation (NASDAQ:SCUR), the experts in securing connections between people, applications, and networks(TM), today announced the results of an independent survey documenting the level of adherence by enterprises to a list of "Simple Security Measures" provided by the Department of Homeland Security's National Infrastructure Protection Center (NIPC). The survey, titled "Basic Insecurity: How Many Businesses are Ignoring Common Sense Security Advice" was conducted for Secure Computing by TheInfoPro, Inc., an independent research firm. The study surveyed 111 enterprise IT managers across a broad variety of industries in February 2004, and is available at http://www.securecomputing.com/pdf/basicinsecurity.pdf.
Among the report's findings were that 96 percent of enterprises didn't take at least one of the NIPC suggestions that were included in the study, and that 50% failed to take three or more. The NIPC issued the "Seven Simple Computer Security Tips" in 2002, which is available at http://www.nipc.gov/warnings/computertips.htm. Enterprise IT managers were surveyed about their adherence to those portions of the guidelines that were most appropriate for enterprise organizations, which included practices for passwords, data backup and anti-virus software.
The NIPC recommends that users "Use strong passwords, choose passwords that are difficult or impossible to guess, and give different passwords to all accounts." Yet only 63 percent of enterprises usually or always require the use of difficult passwords that are at least eight characters long and contain numbers or special characters as well as letters. Only 35 percent usually or always require different passwords on all accounts, and just 23 percent always or usually use automated provisioning software that forces the use of passwords.
The NIPC also recommends that users "Make regular backups of critical data. Backups must be made at least once each day. Larger organizations should perform full backup weekly and incremental backups every day. At least once a month the backup media should be verified." Yet only 69% of enterprises verify the integrity of back up data at least monthly.
Among the positive findings of the study were that virtually all organizations ensure that servers and workstations have functioning anti-virus software, and 90 percent of organizations update virus signatures at least daily or "when-available."
"We realize that it's often difficult for businesses to always follow the best security practices, so we design our products to promote best security practices," said Mike Gallagher, senior vice president of product development at Secure Computing. "Secure Computing is helping businesses achieve outstanding security with tools like our SafeWord(R) strong authentication solution that requires the use of one-time-only passwords, our Sidewinder G2(TM) Security Appliance that includes comprehensive anti-virus, anti-spam, and SmartFilter(R) URL filtering protection that is automatically updated. These three solutions address all three corners of the security triangle -- people, applications, and networks."
About Secure Computing
Secure Computing (NASDAQ:SCUR) has been securing the connections between people and information for over 20 years. Specializing in delivering solutions that secure these connections, Secure Computing is uniquely qualified to be the global security solutions provider to organizations of all sizes. Our more than 11,000 global customers, supported by a worldwide network of partners, include the majority of the Dow Jones Global 50 Titans and the most prominent organizations in banking, financial services, healthcare, telecommunications, manufacturing, public utilities, and federal and local governments. The company is headquartered in San Jose, Calif., and has sales offices worldwide. For more information, see http://www.securecomputing.com.
About TheInfoPro
TheInfoPro (TIP) (www.theinfopro.net) is an independent research network and a leading supplier of market intelligence for the Information Technology (IT) industry. TIP produces fundamental, objective, "grass roots" research on: markets, vendors, issues, future adoption plans, and investor confidence. Transparency is the core of TIP's research process with intelligence delivered without spin, bias or intermediation. TIP produces syndicated and custom research in critical industry segments including Information Security, Network Storage, and Networking.
This press release contains forward-looking statements relating to Secure Computing's ability to deliver security solutions to enterprise customers, and the expected benefits of such, and such statements involve a number of risks and uncertainties. Among the important factors that could cause actual results to differ materially from those indicated by such forward-looking statements are delays in product development, undetected software errors or bugs, competitive pressures, technical difficulties, changes in customer requirements, general economic conditions and the risk factors detailed from time to time in Secure Computing's periodic reports and registration statements filed with the Securities and Exchange Commission.
Contacts
Secure Computing Corporation
David Burt, 206-892-1130
David_Burt@securecomputing.com
or
The KMC Group
Pam Miller, 425-450-9965
pamm@kmcgroup.com
[ Comment, Edit or Article Submission ]
