Feeds

Lack of database trip-wires gives crooks an easy run

No alarm. No idea

Boost IT visibility and business value

Leaked information from databases is becoming an increasingly serious concern, yet when it comes to plugging the holes many organisations are running so many databases they hardly know where to start.

Only six in ten of 600+ senior IT execs quizzed in a recent survey by the Ponemon Institute said they monitor their databases for suspicious activity. The other four in ten said they either don't monitor or don't know for sure whether they check or not. More than half those who have failed to implement a monitoring regime run 500 or more databases, a number that's growing and adding to the confusion.

More than 150 million data records have been exposed in the past two years, many through lax database security. Customer data represents the most common data type contained within databases, with 78 per cent saying databases are either critical or important to their business.

IT departments recognise the problem and the need to keep tabs on sensitive data, even though many are struggling to cope. Application Security, which sponsored the survey, said the study highlights the gap between corporate policy and data security realities on the ground.

Organisations are wrestling with how to protect data from misuse by external hackers and malicious insiders, while making data more readily available in order to drive business objectives. More than half (57 per cent) rate inadequate protection against malicious insiders as a major headache, with a similar number (55 per cent) citing "data loss" by internal entities as a concern.

Although the survey focused on large organisations, addressing changes in regulatory compliance isn't on the 2007 IT agenda for two in five (40 per cent) of the respondents.

More details of the survey can be found in a Ponemon/Application Security white paper here. ®

Boost IT visibility and business value

More from The Register

next story
KDE releases ice-cream coloured Plasma 5 just in time for summer
Melty but refreshing - popular rival to Mint's Cinnamon's still a work in progress
Leaked Windows Phone 8.1 Update specs tease details of Nokia's next mobes
New screen sizes, dual SIMs, voice over LTE, and more
Secure microkernel that uses maths to be 'bug free' goes open source
Hacker-repelling, drone-protecting code will soon be yours to tweak as you see fit
Mozilla keeps its Beard, hopes anti-gay marriage troubles are now over
Plenty on new CEO's todo list – starting with Firefox's slipping grasp
Apple: We'll unleash OS X Yosemite beta on the MASSES on 24 July
Starting today, regular fanbois will be guinea pigs, it tells Reg
Another day, another Firefox: Version 31 is upon us ALREADY
Web devs, Mozilla really wants you to like this one
Cloudy CoreOS Linux distro declares itself production-ready
Lightweight, container-happy Linux gets first Stable release
prev story

Whitepapers

Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Consolidation: The Foundation for IT Business Transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.
Backing up Big Data
Solving backup challenges and “protect everything from everywhere,” as we move into the era of big data management and the adoption of BYOD.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Why and how to choose the right cloud vendor
The benefits of cloud-based storage in your processes. Eliminate onsite, disk-based backup and archiving in favor of cloud-based data protection.