Security Beat: Canadian SMBs not implementing basic security practices

Symantec Corp released the Canadian findings of its 2009 Storage and Security Small and Midsized Business (SMB) survey. The study found while 94% of Canadian SMBs understand the importance of protecting their information, many have yet to implement basic security solutions such as antivirus and backup/recovery. According to the survey findings, 60% of companies polled have yet to implement an endpoint protection solution. This is despite the fact that one quarter (25%) of companies polled do not have password protected desktops and laptops, and more than half (54%) have had a lost or stolen laptop or smartphone. RSA simplifies use of encryption RSA, the security division of EMC, announced enhancements to RSA key manager suite (RKM), its enterprise encryption key management system designed to manage encryption keys at the application, database, and storage layer. RSA professional services now also offers a new tokenization service that is engineered to extend RKM by enabling the use of tokens to mask and protect sensitive data. Tokenization is designed to allow for data-masking without changing the underlying format of the data, and provides security without substantial operational changes to the application infrastructure. HP throws a ProCurve at network security market Hewlett-Packard ProCurve is adding a new threat management services module that is a plug in blade for existing ProCurve 8212 and 5400 series switches. The new module adds firewall, virtual private network (VPN) and intrusion prevention (IPS) functionality to the switches. The move could bring HP’s ProCurve into more direct competition against security platform plays from networking infrastructure vendors like Cisco Systems and Juniper Networks. HP is also upgrading its software suite, called the HP ProCurve manager plus, to version 3.0 for managing security and access across a network. Lack of end user training a large and growing threat to IT security IT security remains a major concern of IT professionals around the world according to Oakbrook Terrace, IL-headquartered CompTIA’s 7th annual report Trends in Information Security: an Analysis of IT Security and the Workforce. Although the number of security breaches has remained moderate over the last few years, the data indicate the severity levels have increased. The most significant costs of security breaches remain the overall impact on employee productivity. About one-third of respondents cited lost productivity as the top consequence of a breach, followed by a disruption of revenue-generating activities. The primary cause for the most severe security breaches remains unintentional in nature and is typically caused by human error. This demonstrates a need for more employee training and deeper knowledge of technology functions. Security doesn’t escape the IT spending axe In August 2008, research from Goldman Sachs Group Inc concluded that 2009 would feature security spending growth in the mid-single digits. Now respondents are predicting a 2% decline on security spending. That’s better than the 9% decline in overall IT spending, but still sobering considering security spending was once considered untouchable. Some highlights: Almost all respondents are trying to renegotiate security maintenance contracts and 68% have been successful; security buyers are focusing on suites; cloud computing, data security and compliance requirements are growth areas in security; and only 10% of respondents are not seeing any vendor flexibility on price. Cisco Systems rolls out security upgrades Cisco Systems made a number of announcements at the recent RSA security conference, focusing on Cisco security cloud services, which tie the cloud and the local network together, allowing companies to deliver security from multiple networks and apps. Examples include software that captures threat data – obtained and captured from a variety of sources – and transforms it into dynamic updates to the network’s security backbone to ward off threats faster; other new software offerings, including Botnet traffic filters for Cisco appliances to more accurately identify infected clients and VPN enhancements; and Cisco SAFE, a security blueprint that helps organizations plan, design and deploy networked security services, including remote offices and data centres. McAfee launches free online cybercrime help centre McAfee Inc has launched a web site named Cybercrime Response Unit. The site offers a forensic scanning tool that checks for malware on the computer and cookies left by suspicious web sites to help determine if the machine has been compromised. A toll-free number is available for people whose scan results are worrisome. Symantec acquires Mi5 Networks Symantec Corp has acquired web security company Mi5 Networks, aiming to integrate web gateway technology into an array of security suites for both small businesses and enterprises. The Mi5 acquisition allows Symantec to integrate streaming technology to inspect both inbound and outbound traffic, company executives said. Meanwhile, the purchase also fills a niche in Symantec’s product portfolio, adding specialized capabilities that protect against increasingly sophisticated web-based malware. McAfee acquires Solidcore Systems Inc McAfee Inc has announced a definitive agreement to acquire privately owned Solidcore Systems Inc, a US-headquartered data centre-security firm.

Security Beat: Canadian SMBs not implementing basic security practices

News | May 29, 2009

Unlock all the Canadian telecom, broadcasting and digital media news you need.

FREE TRIAL

SUBSCRIBE

Inside The Wire Report

Information

Hill Times Publishing

Get in Touch With Us