Security Strategy is Becoming More Important than SecurityTechnologies

The annual survey of corporate security by InformationWeek shows that the approach taken has been shifting with the environmental changes taking place. While the approach is previous years seemed to place an emphasis on getting the technology in place to protect the company, now there is more emphasis on employee training and awareness.

The survey covers over 1000 companies and only 13% of them say they are more vulnerable to attacks than last year, a significant decrease. The element of their security structure they feel is least effective is their firewalls. And they are, as one would predict, more concerned than ever about mobility and its effect on corporate security - with good reason.

One possible explanation for the shifting attitudes of companies away from technology and towards strategy seems to be a recognition that increased employee awareness is needed. The technology wars have been increasingly combative and much more difficult to keep up with. Training employees to recognize and deal with threats and actual attacks seems to pay bigger dividends.

For a copy of the survey report, check this link.