Top Trends in Information Security 2012
TechTouchstone recently carried out a survey with senior executives working within Information Security to find out what the key issues might be in 2012 and how budgets will change from 2011.
Level of respondents
Respondents to the survey were made up of Enterprise organisations with between 1000 and 120,000 seats, 50% have over 3000 seats. Job titles range from IT Manager, Head of IT through to CIO level.
Information Security budgets
On average we found that respondents have an IT operating budget allocated to Information Security in 2012 of between 2-5% with a third of respondents spending up to 10-30% on security.
When asked how their Information Security budgets differ from 2011, 72% of respondents said their IT Security budget is the same or more than 2011. Only 7.8% are spending less than 2011, which is in line with other industry research. Jon Oltsik, principal analyst at Enterprise Strategy Group commented in his blog on Network World that a survey they carried out with IT professionals - more than half of Enterprise organisations will increase security spending in 2012, and of these, 18% will bolster security spending by 8% or more.
Top priorities for 2012
We also asked what the top priorities for 2012 were and the results looked like this:
Data Security was the number one priority for enterprise organisations with over 40%, Application Security was also top with just under 50% stating that it was the 2nd highest priority for their organisation. Business Continuity/disaster recovery is a top priority for 37% and Regulatory Compliance for 36%.
External threats from worms and viruses was a popular area of priority with 43% ranking it as number 3 in priority order.
This survey was taken in January 2012 by participants from the Tech:Touchstone Information Security community from Enterprise organisations across all verticals in senior IT Security roles within the UK and Netherlands.
If you are involved in Information Security for your organisation you could benefit from attending the Information Security Executive Summit (28/29th Feb 2012). Free VIP fully hosted invitations are available for qualifying delegates.
