The ISF's 1996/97 Information Security Status Survey was the most searching study ever conducted into the security of information systems in leading enterprises operating around the world. Surveyed organizations had a collective annual turnover of $450 billion. This report focussed on the effectiveness of the security arrangements applied to 120 communications networks.
The survey probed the key features of each network, the status of controls and the types of incident most likely to compromise the confidentiality, integrity or availability of communications.
Analysis of responses identified 'benchmark networks' with exceptionally effective security arrangements - effectiveness being demonstrated by substantially lower incident rates. The pattern of controls applied to these networks is highly revealing about how IT risk can be managed down to an acceptable level.
|
