Risk
12/19/2012
07:24 PM
Dark Reading
Dark Reading
Products and Releases
50%
50%

Only 47% Of SMBs Ask Partners About Their Security Processes

nCircle-sponsored survey finds 61% of respondents share customer data with partners or vendors

SAN FRANCISCO, CA – – nCircle, the leader in information risk and security performance management solutions, today announced the results of a sponsored study commissioned by nCircle and conducted by Dimensional Research. In the study, over 240 small and mid-sized business participants were asked how they evaluate their business partners' security programs.

"Business partners and vendors can be a weak link in the security of sensitive business information," said Diane Hagglund, principal researcher at Dimensional Research. "SMB IT teams often have a level of confidence in their partners' security that hasn't been fully vetted."

Key study findings include:

61% of respondents said they share customer data with partners or vendors, 44% share financial data and 37% share legal information

80% say their organization is more effective at securing sensitive customer and business information than their business partners

Only 47% of respondents said they always ask business partners for details about their security processes before sharing confidential information

74% of respondents are confident or very confident that their business partners adequately protect their companies sensitive business information

"This study had some good news and some bad news," said Andrew Storms, director of security operations for nCircle. "It's encouraging that half of small businesses ask their business partners about security because it means more businesses are aware of the importance of their security. It's discouraging that 80% of participants believe their security is better than their business partners', but they continue to share customer data with them. Let's hope that greater security awareness means more detailed, actionable security requirements for partners are in the works. Better business partner security is everyone's responsibility."

The study is illustrated in nCircle's "Business Partner (In)Security" infographic. Interested parties have permission to embed and share the infographic on their websites or blogs with attribution.

For more information about the study, please visit: http://www.ncircle.com/index.php?s=resources_surveys_Business-Partner-Survey-2012

About nCircle

nCircle is the leading provider of information risk and security performance management solutions to more than 6,500 businesses and government agencies worldwide. nCircle solutions enable enterprises of all sizes to (1) automate compliance and reduce risk, and (2) measure and compare the performance of their IT security program with their own goals and industry peers. nCircle solutions may be deployed on a customer's premises, as a cloud-based service, or in combination, for maximum flexibility and value.

nCircle has won numerous awards for growth, innovation, customer satisfaction and technology leadership and has been ranked among the top 100 best places to work in the San Francisco Bay Area. nCircle is headquartered in San Francisco, CA, with regional offices throughout the United States and in London and Toronto. To learn how you can more effectively protect your company visit us at http://www.ncircle.com.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2015-0986
Published: 2015-05-26
Multiple stack-based buffer overflows in Moxa VPort ActiveX SDK Plus before 2.8 allow remote attackers to insert assembly-code lines via vectors involving a regkey (1) set or (2) get command.

CVE-2015-3808
Published: 2015-05-26
The dissect_lbmr_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not reject a zero length, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.

CVE-2015-3809
Published: 2015-05-26
The dissect_lbmr_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not properly track the current offset, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.

CVE-2015-3810
Published: 2015-05-26
epan/dissectors/packet-websocket.c in the WebSocket dissector in Wireshark 1.12.x before 1.12.5 uses a recursive algorithm, which allows remote attackers to cause a denial of service (CPU consumption) via a crafted packet.

CVE-2015-3811
Published: 2015-05-26
epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 improperly refers to previously processed bytes, which allows remote attackers to cause a denial of service (application crash) via a crafted packet, a different vulnerability than CVE-2015-...

Dark Reading Radio
Archived Dark Reading Radio
Join security and risk expert John Pironti and Dark Reading Editor-in-Chief Tim Wilson for a live online discussion of the sea-changing shift in security strategy and the many ways it is affecting IT and business.