Welcome Guest. | Log In | Register | Membership Benefits
  • |   Email this page E-mail
  • |  Print Print
  • |   Bookmark and Share

Employees Frequently Bypass Security Policy To Do Their Jobs, Study Says

Twelve percent of workers knowingly violate access rules, Harris poll shows

Mar 15, 2010 | 05:19 PM | 

By Tim Wilson

A growing number of workers admit to breaking company security policies in order to get their work done, according to a new poll published today.

The poll of 1,347 workers, conducted by Harris Interactive and sponsored by Fiberlink, indicates that 12 percent of respondents admit to knowingly violating the policies put in place by their companies' IT departments in order to get their work done.

"We see this as a mobility wake-up call for all IT managers," says Jim Sheward, CEO of Fiberlink. "IT departments nationwide spend a lot of time and money on their compliance, usage, and access policies, but they only work if people follow the rules. Without extensive and effective compliance tools that ensure that IT policies are being followed, companies could face dangerous breaches."

In early 2008, AMR forecast that spending on governance, risk, and compliance would hit $33.5 billion in 2009. Instead, it reached only $28.7 billion, or 14 percent less than predicted. According to AMR analyst John Hagarty, this spending suffered because "this stuff is often considered discretionary -- a good business practice, but not essential."

Have a comment on this story? Please click "Discuss" below. If you'd like to contact Dark Reading's editors directly, send us a message.



Currently we allow the following HTML tags in comments:

Single tags

These tags can be used alone and don't need an ending tag.

<br> Defines a single line break

<hr> Defines a horizontal line

Matching tags

These require an ending tag - e.g. <i>italic text</i>

<a> Defines an anchor

<b> Defines bold text

<big> Defines big text

<blockquote> Defines a long quotation

<caption> Defines a table caption

<cite> Defines a citation

<code> Defines computer code text

<em> Defines emphasized text

<fieldset> Defines a border around elements in a form

<h1> This is heading 1

<h2> This is heading 2

<h3> This is heading 3

<h4> This is heading 4

<h5> This is heading 5

<h6> This is heading 6

<i> Defines italic text

<p> Defines a paragraph

<pre> Defines preformatted text

<q> Defines a short quotation

<samp> Defines sample computer code text

<small> Defines small text

<span> Defines a section in a document

<s> Defines strikethrough text

<strike> Defines strikethrough text

<strong> Defines strong text

<sub> Defines subscripted text

<sup> Defines superscripted text

<u> Defines underlined text

Dark Reading encourages readers to engage in spirited, healthy debate, including taking us to task. However, Dark Reading moderates all comments posted to our site, and reserves the right to modify or remove any content that it determines to be derogatory, offensive, inflammatory, vulgar, irrelevant/off-topic, racist or obvious marketing/SPAM. Dark Reading further reserves the right to disable the profile of any commenter participating in said activities.

Disqus Tips To upload an avatar photo, first complete your Disqus profile. | View the list of supported HTML tags you can use to style comments. | Please read our commenting policy.
Subscribe to RSS



Insider Threat Reports

report How Encrypting Content Reduces Liabilities and Costs
Data is everywhere, and most of it is not encrypted. Companies need to protect their data to avoid loss of corporate reputation, expensive remediation efforts, loss of goodwill among customers, loss of revenue and other unpleasant results. Learn how encrypting data in transit and at rest can help.

report What Every Business Should Know About Cloud Computing and e-Discovery
Get guidance on how to deploy e-discovery applications and craft service-level agreements with your cloud service provider, so your company's cloud computing initiatives don't undermine your investments in e-discovery. Use these guidelines to evaluate cloud service providers and to define your SLAs.

report Spam in 2011: Protection Against Evolving Threats
The very best anti-spam solutions deliver 95% effectiveness. Unfortunately, that's not good enough. To defeat spam, enterprises need a holistic approach. Learn about evolving spam threats and the technology required to close the 5% gap in defenses.

Other reports from the Insider Threat Tech Center: