IT Security Breaches: The Costs and the Cures Todd Thibodeaux President and CEO CompTIA

Who We Are | What We Do E DUCATION C ERTIFICATIONS A DVOCACY P HILANTHROPY

The Usual Opening… Scary Security Headline: Oh the Humanity

Wait, How About… Technology, Training, Teamwork Thwart Security Breach

Setting the Stage: The Good and the Not so Good More organizations rate security a high priority; although still often viewed as an IT problem # of security breaches roughly constant; severity level trending upwards + new threats and vulnerabilities IT professionals rate human error a primary cause of many security breaches Improvements to security landscape attributed to better technology, policy and training Spending on security held up relatively well in 2010

Forecast Prioritization of security relative to all strategic IT initiatives Prioritization of InfoSec Trends Upwards

Changes to the Security Landscape Increasing ConcernsIncreasing Areas of Improvement Rise of social networking52% Improved technology to protect against threats 55% More reliance on Internet-based applications 50%Improved IT staff expertise41% Growing criminalization and organization of hackers 48%Improved security policies36% Greater interconnectivity of devices46% Improved ability of end-users to avoid security threats 33% Sophistication of security threats exceeding staff’s expertise 42% Improved ability to enforce security policies 24% More access points42% More exec. mgt. support of security 16%

Many Variables to Consider More Critical No Change Less Critical

Economic Recession Affects Security Likelihood of new internal security threat due to departing or disgruntled employees

Elements of Human Error that Contribute to Security Breaches

Actions Taken After Security Breaches

Top Areas where Organizations want to Improve their Response to Security Breaches

Security Investments that Yield Highest ROI

Security Spend Wish List

Wrap-up | Q&A