Symantec’s 2011 State of Security Survey explores the state of cybersecurity efforts in organizations of all sizes. For the second year in a row, IT said security is the leading business risk they face, ahead of traditional crime, natural disasters and terrorism. However, organizations are getting better at fighting the war against cybersecurity threats. While the majority of respondents suffered damages as a result of cyberattacks, more respondents reported a decline in the number and frequency of attacks compared to 2010.

1. 2011 State of Security Survey
Global Key Findings

2. Methodology
• Survey performed by Applied Research
• 3,300 global organizations
– SMBs: Individuals in charge of IT resources
– Enterprises: Tactical IT, Strategic IT
and C-level professionals
• Cross-industry
2

3. Key Findings
• Cybersecurity is important to businesses
• The drivers of security are changing
• Details about cyberattacks for businesses
• What are businesses doing about security?
3

4. Cybersecurity Important to Businesses
• Biggest business risk – well ahead of natural disasters and terrorism
4

5. Cybersecurity Important to Businesses
More than one third see security somewhat/significantly more important than
12 months ago
5

6. What Is Driving Security?
Industry trends driving security challenges
• Mobile computing
• Social media
• Consumerization of IT
6

7. What Is Driving Security?
Most significant security threats
• Hackers
• Well-meaning insiders
• Targeted attacks
7

8. Details About Cyberattacks for Businesses
• Nearly three-quarters saw attacks
• About 21% see frequency increasing
8

9. Details About Cyberattacks for Businesses
Top attack vectors:
• Malicious code
• Social engineering
• External malicious attacks
Fastest growing attack vectors:
• Malicious code
• Social engineering
• External malicious attacks
9

10. Details About Cyberattacks for Businesses
• Most (92%) saw losses from cyberattacks
• Downtime, employee PII, intellectual
property and customer PII most common
losses
• Most cases (84%), losses translated into
actual costs
• Productivity; revenue; lost organizational,
customer or employee data; and brand
reputation were highest costs
• 80% of businesses lost at least $195,000
as a result of cyberattacks
10

11. What Are Businesses Doing About Security?
Doing best with routine security – innovation and strategic initiatives, not quite
as well
11

12. What Are Businesses Doing About Security?
Areas of growth in staffing:
• Network security
• Web security
• Endpoint security
Areas of growth in budgets:
• Network security
• Web security
• Security systems management
12

13. Symantec Recommendations
• Develop and enforce IT policies
• Protect the information
• Validate and protect identities
• Manage systems
• Protect the infrastructure
13