Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Risk

1/27/2010
08:11 PM
Jake Widman
Jake Widman
Commentary
50%
50%

Report: SMBs To Spend More On Security

According to a new survey from Forrester Research, businesses of all sizes plan to spend more on security -- especially network security -- in 2010.

According to a new survey from Forrester Research, businesses of all sizes plan to spend more on security -- especially network security -- in 2010.For its twin reports "The State Of Enterprise IT Security And Emerging Trends: 2009 To 2010" and "The State Of SMB IT Security And Emerging Trends: 2009 to 2010," Forrester surveyed nearly 2,200 executives and technology decision-makers in both large enterprises and in small and midsize businesses about their security plans.

More than 80 percent of those surveyed said that managing threats and vulnerabilities was a high priority for 2010. Data security continues to occupy the top IT budget spot, but network security is the fastest-growing element. Thirty-six percent of SMBs said they expected to increase spending on network security in the coming year.

The security trend causing the most concern, though, is the increasing use of consumer technology, in particular smartphones and Web 2.0 applications, in the workplace. "In general, this follows the broader trend of IT losing centralized control of technology adoption, deployment, and use," said Forrester analyst and vice president Jonathan Penn. "Its not just consumer technology like iPods and the use of Facebook or Twitter; it also shows up in the uncontrolled proliferation of SharePoint sites by business groups or in the use of cloud computing services by application developers."

According to Penn, businesses are increasingly interested in managed security services. The adoption of such services is being driven more by a desire for improved protection than by the cost savings they can offer.

The two reports are available for $1,749 each, with a money-back guarantee.

More From bMighty:

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
COVID-19: Latest Security News & Commentary
Dark Reading Staff 10/27/2020
Are You One COVID-19 Test Away From a Cybersecurity Disaster?
Alan Brill, Senior Managing Director, Cyber Risk Practice, Kroll,  10/21/2020
Botnet Infects Hundreds of Thousands of Websites
Robert Lemos, Contributing Writer,  10/22/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Special Report: Computing's New Normal
This special report examines how IT security organizations have adapted to the "new normal" of computing and what the long-term effects will be. Read it and get a unique set of perspectives on issues ranging from new threats & vulnerabilities as a result of remote working to how enterprise security strategy will be affected long term.
Flash Poll
How IT Security Organizations are Attacking the Cybersecurity Problem
How IT Security Organizations are Attacking the Cybersecurity Problem
The COVID-19 pandemic turned the world -- and enterprise computing -- on end. Here's a look at how cybersecurity teams are retrenching their defense strategies, rebuilding their teams, and selecting new technologies to stop the oncoming rise of online attacks.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-8260
PUBLISHED: 2020-10-28
A vulnerability in the Pulse Connect Secure < 9.1R9 admin web interface could allow an authenticated attacker to perform an arbitrary code execution using uncontrolled gzip extraction.
CVE-2020-8261
PUBLISHED: 2020-10-28
A vulnerability in the Pulse Connect Secure / Pulse Policy Secure < 9.1R9 is vulnerable to arbitrary cookie injection.
CVE-2020-8262
PUBLISHED: 2020-10-28
A vulnerability in the Pulse Connect Secure / Pulse Policy Secure below 9.1R9 could allow attackers to conduct Cross-Site Scripting (XSS) and Open Redirection for authenticated user web interface.
CVE-2020-8263
PUBLISHED: 2020-10-28
A vulnerability in the authenticated user web interface of Pulse Connect Secure < 9.1R9 could allow attackers to conduct Cross-Site Scripting (XSS) through the CGI file.
CVE-2020-8239
PUBLISHED: 2020-10-28
A vulnerability in the Pulse Secure Desktop Client < 9.1R9 is vulnerable to the client registry privilege escalation attack. This fix also requires Server Side Upgrade due to Standalone Host Checker Client (Windows) and Windows PDC.