IOUG: Companies Making Little Headway Securing Databases

Independent Oracle Users Group releases second annual database security study

October 02, 2009

MEDFORD, N.J.--(BUSINESS WIRE)--The Independent Oracle Users Group (IOUG) today released its second annual database security study, "IOUG Data Security 2009: Budget Pressures Lead to Increased Risks". The study conducted by Unisphere Research and sponsored by Oracle Corporation surveyed members of the IOUG in July and August of 2009. The 316 respondents oversee complex and multiple database sites, many with large volumes of data. Forty-two percent of those surveyed manage greater than 100 databases, and 20 percent manage in excess of 500 databases.

Among the key findings:

There has been a 50 percent increase in data breaches since last year and growing wariness of the potential for data security problems. However, the uncertain economic climate over the past year has put a damper on the availability of funding and staff time to address these issues.

There is pressure to do more with less and unfortunately in many cases less is actually being done. Only 28 percent of respondents reported receiving additional funding for their data security budgets " down a third from a year ago.

Managers see internal threats " such as access by unauthorized users " as more pressing than external hackers or viruses. Potential abuse of access privileges by IT staff also ranked highly as a perceived security risk and regulatory compliance issue.

Most organizations still do not have mechanisms in place to prevent database administrators and other privileged database users from reading or tampering with sensitive information in financial, HR, or other business applications. Most are still unable to even detect such breaches or incidents.

Outsourcing of database administration, development and testing functions has increased by up to 40 percent over the past year. More outsourcing and off-shoring without adequate security has also resulted in organizations unintentionally exposing data to additional risks.

Close to half of organizations employ actual production data within non-production environments, thereby exposing this information in unsecured settings. To make matters worse, there has been a decline in companies "de-identifying" such sensitive data. A third even ship live un-encrypted production data offsite.

Overall, corporate management is still complacent about data security. One out of four cited lack of management commitment and lax procedures. Efforts to address data security are still ad hoc and manual. Organizations are not addressing database security as part of overall database security strategy and making the most of limited budgets.

Members of the IOUG received access to the final report document as a benefit of membership with the organization, under the IOUG ResearchWire program. Others may download the final report in PDF through the Oracle web site at http://www.oracle.com/go/?&Src=6811199&Act=294&pcode=WWMK09047366MPP012

To learn more about the survey findings and cost-effective solutions to mitigate risks to enterprise data and Oracle databases, please join us for a complementary live webcast hosted by the IOUG. Register here: http://www.dbta.com/Webinars/Details.aspx?EventID=192&src=webad For more information contact Aimee Pagano, [email protected], (312) 673-5801

About the Independent Oracle Users Group Founded in 1993, the Independent Oracle Users Group (IOUG) is a global membership organization that provides Oracle users the opportunity to enhance their productivity, maximize their investment and influence the quality, usability and support of Oracle technology. The IOUG represents the voice of Oracle technology and database professionals serving nearly 20,000 database administrators, developers, architects, technical managers and other Oracle professionals throughout North America and worldwide. The IOUG empowers its members to be more productive and successful in their business and careers by delivering education, sharing best practices and providing technology direction and networking opportunities. For more information, visit www.ioug.org or call (312) 245-1579.

Unisphere Research, based in Chatham, New Jersey, conducts proprietary and custom research projects in conjunction with the top data management and IT user groups, as well as with other leading industry communities.

Contacts Independent Oracle Users Group (IOUG) Aimee Pagano, 312-673-5801 [email protected]

More Insights

White Papers

More White Papers

Webinars

More Webinars

Reports

More Reports

Editors' Choice

Employees Are Feeding Sensitive Biz Data to ChatGPT, Raising Security Fears

Robert Lemos, Contributing Writer, Dark Reading

Microsoft Zero-Day Bugs Allow Security Feature Bypass

Jai Vijayan, Contributing Writer, Dark Reading

How Patch Tuesday Keeps the Beat After 20 Years

Andrada Fiscutean, Contributing Writer, Dark Reading

Access Control Gap in Microsoft Active Directory Widens Enterprise Attack Surface