• 82 percent of IT and business decision makers have attempted to limit data access locations for employees in an attempt to improve security
• Despite having protections in place, 73 percent of respondents are still concerned about malware and advanced persistent threats

• Only one in four respondents are very confident in their C-Suite’s ability to budget enough for data security solutions over the next five years

Dell today announced the results of the first Dell Data Security Survey. The report found that though the C-suite recognises the benefits of data security, organisations are still struggling to develop programs that effectively incorporate security strategies without detracting from other business initiatives. Even with tools in place to address data security needs, business and IT decision makers report gaps in their comfort level with implementing or expanding programs that rely on these technologies. In addition, the survey found that security concerns are limiting the adoption of cloud and mobility solutions throughout organisations.

Data security has become a priority for C-suite executives, keeping ahead of the threats remains a concern  

While the C-suite is more invested in data security than in the past, IT teams feel executives are still not allocating the energy or resources needed to properly address data security challenges.

• Nearly three in four decision makers agree that data security is a priority for their organisation’s C-suite; however, one in four decision makers don’t find their C-suite to be adequately informed about data security issues.
• Three in four decision makers say their C-suite plans to increase current security measures, and more than half expect to spend more money on data security in the next five years.
• Cost is a concern when it comes to building on existing programs, with 53 percent of respondents citing cost constraints for why they don’t anticipate adding additional security features in the future.
• Only one in four decision makers are very confident in their C-suite’s ability to budget enough for data security solutions over the next five years.

“These findings suggest that the C-level has to be more engaged when it comes to integrating data security strategies into their business,” said Steve Lalla, VP of Commercial Client Software & Solutions for Dell. “Business leaders understand the need to invest in their security infrastructure, but that isn’t translating into updating or expanding their current systems to adequately prevent modern attacks.”

Despite increased buy-in from the C-suite, IT departments still need more business support to fully integrate data security

The report found that a lack of investment in streamlined technologies and a shortage of talent are both barriers to fine-tuning data security programs.

• The majority of decision makers (58 percent) believe that their organisation is adversely affected by the shortage of trained security professionals in the industry.
• 69 percent of decision makers still view data security as a burden on their time and budget.
• Still, nearly half (49 percent) of respondents believe they need to spend more time securing their data in the next five years than they are today.
• 76 percent believe their solutions would be less burdensome if provided through a single vendor.

“These findings show that the costs and time constraints that commonly accompany traditional single point solutions have an adverse impact on IT departments,” said Lalla. “For companies with hundreds or thousands of employees, managing each endpoint separately using multiple consoles is extremely inefficient and leads to a high probability of conflict or incompatibility. Implementing a single, integrated suite for IT management can drastically improve this process.”

Malware and weaponised attacks are keeping IT and business decision makers up at night

The report showed that respondents remain highly concerned about malware, despite the fact that most have anti-malware solutions in place.

• Nearly three in four (73 percent)decision makersare somewhat to very concerned about malware and advanced persistent threats.
• Concern over malware threats is highest in the United States (31 percent very concerned), France (31 percent very concerned) and especially India (56 percent very concerned) – while it’s a lesser concern in Germany (11 percent very concerned) and Japan (12 percent very concerned).
• Only one in five respondents are very confident in their ability to protect against sophisticated malware attacks.
• Respondents are more worried about spear phishing attacks (73 percent are concerned) than any other breach method.

“The fact that IT and business decision makers are not confident in their anti-malware defense implies that they may be using outdated or ineffective tools,” said Brett Hansen, Executive Director, Data Security Solutions, Dell. “When IT teams do not have the resources they need to proactively prevent threats and stay on top of the evolving threat landscape, they are forced to play defense using threat detection and remediation alone.”

Employers feel they have to limit mobility in order to protect data

The common narrative is that all offices are becoming more mobile, but according to this report, the truth is somewhat more complicated.

• The majority of mid-market companies (65 percent) are holding back plans to make their workforce more mobile for security reasons with 67 percent hesitant to introduce a bring-your-own-device (BYOD) program.
• While 82 percent of decision makers have attempted to limit data access points to enhance security, 72 percent of decision makers believe that knowing where data is accessed will make their data protection measures more effective.
• 69 percent of respondents say they are still willing to sacrifice individual devices to protect their company against a data breach, yet 57 percent of respondents are still concerned about the quality of encryption used by their company.
• Security concerns aside, two in five respondents are interested in allowing greater mobility for enhanced employee productivity.

“When organisations opt out of creating sanctioned, secure mobility programs, they open themselves up to other risks,” said Hansen. “Mobility and security can easily co-exist with modern data security technology that uses intelligent encryption to protect data whether it’s at rest, in motion or in use.”

Respondents see their data at risk in public cloud platforms

With more employees using public cloud services like Box and Google Drive in the workplace, decision makers are not confident in their ability to control risks posed by these applications.

• Nearly four in five respondents are concerned with uploading critical data to the cloud, and 58 percent are actually more concerned than they were a year ago.
• 38 percent of decision makers have restricted access to public cloud sites within their organisation due to security concerns.
• 57 percent of decision makers who are current cloud users, and 45 percent of those planning to use public cloud platforms, will rely heavily on cloud vendors to provide security.
• Only one in three organisations cite improving secure access to public cloud environments as a key focus for their security infrastructure, yet 83 percent say that employees are either using, or will soon be using, public cloud environments to share and store valuable data.

“Security programs must enable employees to be both secure and productive, and this means enabling technology that helps them do their jobs,” said Hansen. “Companies can try to limit or prohibit public cloud use, but it’s more effective to use intelligent data encryption to protect corporate data wherever it may go, and reduce the risk of employees working around restrictive policies in order to be productive.”