Mobile workforce increases emphasis on data leakage prevention

Certification of cloud service providers perceived as a must

Dubai, 28 December 2010: Information security systems must expand and adapt to meet the demands of the enterprise in an evolving borderless world, according to Ernst & Young's 13th annual Global Information Security Survey.  Nearly 1600 respondents from 56 countries, including from the Middle East, took part in the study.

A significant increase in use of external service providers and business adoption of new technologies such as cloud computing, social networking and Web 2.0 is recognized to increase risk for 60% of respondents. Yet, in spite of this, less than half (46%) intend to increase their annual investment in information security.

Less than a third of global businesses have an IT risk management program in place capable of addressing the risks related to the use of new technologies. In spite of the rapid emergence of new technology, just one in ten companies consider examining new and emerging IT trends a very important activity for the information security function to perform.

Middle East's primary concern is data security and integrity

Wasim Khan MENA IT Services and Telecom Leader, Ernst & Young says: "The region is seeing one of the fastest uptakes of smart mobile devices in the world and the demand for access to corporate and sensitive data from remote locations has grown in tandem. Over the next few years, we expect companies to come alive to the security risks posed by mobile and online leakages and upgrade their security infrastructure."

In addition Srikant Ranganathan, Partner, IT Advisory Ernst & Young Bahrain adds: "In the MENA region, the Government and Public Services sector has been at the forefront of the adoption of Internet based customer reach.  This has brought on risks to which they were previously unexposed to.  The correct focus on protection against these new risks is critical to the success of these initiatives."

The mobile workforce

Over half of respondents state that increased workforce mobility poses a considerable challenge to the effective delivery of information security initiatives. This is due to the widespread use of mobile computing devices which allows individuals to access and distribute business information from anywhere at any time. For almost two-thirds (64%) of those surveyed, employees' level of security awareness is recognized as a considerable challenge.

Plugging the leaks

Half of respondents plan to spend more over the next year on data leakage and data loss prevention - a seven percentage point increase from last year. To address potential new risks, 39% are making policy adjustments, 29% are implementing encryption techniques and 28% are implementing stronger identity and access management controls.

"Increased mobility and limited control over end-user devices can also cause problems. This is especially true when trying to implement effective and efficient business continuity and disaster recovery capabilities," adds Wasim.

Processing in the clouds

Cloud computing services are gaining greater adoption: 23% of respondents are currently using cloud computing services and a further 15% are planning to use it within the next 12 months. When asked if an external certification of cloud service providers would increase trust, 85% of respondents said yes, with 43% stating that the certification should be based upon an agreed standard and 22% requiring accreditation for the certifying body.

"Companies and Information security leaders are facing a changing business environment, where traditional enterprise boundaries are quickly evaporating. It is also an environment driven by an increase in workforce mobility, greater adoption of cloud computing services and a growing use of social media and collaborations tools within the enterprise. Organizations will be pressed for both time and resources to mitigate the risks involved but will have no choice but to address them," concludes Wasim.

-Ends- 

About Ernst & Young MENA
The MENA practice of Ernst & Young has been operating in the region since 1923.  For over 87 years, we have evolved to meet the legal and commercial developments of the region. Across the Middle East, we have over 4,200 people united across 20 offices and 15 Arab countries, sharing the same values and an unwavering commitment to quality. We make a difference by helping our people, our clients and our wider communities achieve their potential.

For more information, please visit www.ey.com/me

About Ernst & Young
Ernst & Young is a global leader in assurance, tax, transaction and advisory services. Worldwide, our 141,000 people are united by our shared values and an unwavering commitment to quality. We make a difference by helping our people, our clients and our wider communities achieve their potential.

Ernst & Young refers to the global organization of member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients. For more information about our organization, please visit www.ey.com.

This news release has been issued by EYGM Limited, a member of the global Ernst & Young organization that also does not provide any services to clients.

© Press Release 2010