Risk
12/19/2012
07:24 PM
Dark Reading
Dark Reading
Products and Releases
Connect Directly
RSS
E-Mail
50%
50%

Only 47% Of SMBs Ask Partners About Their Security Processes

nCircle-sponsored survey finds 61% of respondents share customer data with partners or vendors

SAN FRANCISCO, CA – – nCircle, the leader in information risk and security performance management solutions, today announced the results of a sponsored study commissioned by nCircle and conducted by Dimensional Research. In the study, over 240 small and mid-sized business participants were asked how they evaluate their business partners' security programs.

"Business partners and vendors can be a weak link in the security of sensitive business information," said Diane Hagglund, principal researcher at Dimensional Research. "SMB IT teams often have a level of confidence in their partners' security that hasn't been fully vetted."

Key study findings include:

61% of respondents said they share customer data with partners or vendors, 44% share financial data and 37% share legal information

80% say their organization is more effective at securing sensitive customer and business information than their business partners

Only 47% of respondents said they always ask business partners for details about their security processes before sharing confidential information

74% of respondents are confident or very confident that their business partners adequately protect their companies sensitive business information

"This study had some good news and some bad news," said Andrew Storms, director of security operations for nCircle. "It's encouraging that half of small businesses ask their business partners about security because it means more businesses are aware of the importance of their security. It's discouraging that 80% of participants believe their security is better than their business partners', but they continue to share customer data with them. Let's hope that greater security awareness means more detailed, actionable security requirements for partners are in the works. Better business partner security is everyone's responsibility."

The study is illustrated in nCircle's "Business Partner (In)Security" infographic. Interested parties have permission to embed and share the infographic on their websites or blogs with attribution.

For more information about the study, please visit: http://www.ncircle.com/index.php?s=resources_surveys_Business-Partner-Survey-2012

About nCircle

nCircle is the leading provider of information risk and security performance management solutions to more than 6,500 businesses and government agencies worldwide. nCircle solutions enable enterprises of all sizes to (1) automate compliance and reduce risk, and (2) measure and compare the performance of their IT security program with their own goals and industry peers. nCircle solutions may be deployed on a customer's premises, as a cloud-based service, or in combination, for maximum flexibility and value.

nCircle has won numerous awards for growth, innovation, customer satisfaction and technology leadership and has been ranked among the top 100 best places to work in the San Francisco Bay Area. nCircle is headquartered in San Francisco, CA, with regional offices throughout the United States and in London and Toronto. To learn how you can more effectively protect your company visit us at http://www.ncircle.com.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Flash Poll
Current Issue
Cartoon
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-0972
Published: 2014-08-01
The kgsl graphics driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly prevent write access to IOMMU context registers, which allows local users to select a custom page table, and consequently write ...

CVE-2014-2627
Published: 2014-08-01
Unspecified vulnerability in HP NonStop NetBatch G06.14 through G06.32.01, H06 through H06.28, and J06 through J06.17.01 allows remote authenticated users to gain privileges for NetBatch job execution via unknown vectors.

CVE-2014-3009
Published: 2014-08-01
The GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.0 through 11.0 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 does not properly handle FRAME elements, which makes it easier for remote authenticated users to conduct ph...

CVE-2014-3302
Published: 2014-08-01
user.php in Cisco WebEx Meetings Server 1.5(.1.131) and earlier does not properly implement the token timer for authenticated encryption, which allows remote attackers to obtain sensitive information via a crafted URL, aka Bug ID CSCuj81708.

CVE-2014-3534
Published: 2014-08-01
arch/s390/kernel/ptrace.c in the Linux kernel before 3.15.8 on the s390 platform does not properly restrict address-space control operations in PTRACE_POKEUSR_AREA requests, which allows local users to obtain read and write access to kernel memory locations, and consequently gain privileges, via a c...

Best of the Web
Dark Reading Radio