Disaster-Resource.com

Reputation a Major Force Driving Information Security

Most companies are driving information security initiatives in a bid to protect their reputations, not the revenues, according to the Ernst & Young 2008 Global Information Security Survey.

According to an article on the Government Technology website, the international survey found that most believe that a security incident would have a greater impact on reputation and brand than on revenues, with 85 percent of respondents citing damage to reputation and brand as significant, compared with 72 percent for loss of revenues.

“A good brand and reputation can take years to build but can be severely damaged or even destroyed by a single security incident,” Paul van Kessel, global leader of Ernst & Young’s Technology and Security Risk Services, told the publication. “The media coverage surrounding security breaches underscores just how devastating these failures can be to a firm's reputation. For the past few years, most improvements in information security stemmed from regulatory compliance. Now, the desire to protect brand and reputation is motivating many organizations to do more than just tick regulatory and corporate compliance boxes.”

The survey also found that despite tightening economies, organizations are increasing investments in information security and more organizations are adopting international security standards. More than two thirds (67 percent) of respondents interviewed say they have now implemented controls to protect personal information.

“Overall, the results of this year’s survey are encouraging; however, there are some key areas — such as insider threats, privacy and third-party relationships — that need more focus and investment,” van Kessel added.

To read the full article, click here: http://www.govtech.com/gt/558932?topic=117671