Houston, Texas (PRWEB) November 13, 2013
Tripwire, Inc., a leading global provider of risk-based security and compliance management solutions, today announced the results of research comparing risk-based security management in the industrial sector to that of other industries. The survey data is being shared at the eighth annual American Petroleum Institute Cybersecurity Conference.
The survey, conducted in April 2013 with the Ponemon Institute®, evaluates the attitudes of 1,320 respondents from IT security, IT operations, IT risk management, business operations, compliance/internal audit and enterprise risk management. One hundred eight industrial sector respondents from the U.S. and U.K. participated in the industrial controls portion of the survey
“With the rapid escalation of critical infrastructure cybersecurity threats, industrial control organizations have a lot to do,” said Dwayne Melancon, chief technology officer for Tripwire. “It is encouraging that they are embracing a risk-based view of their operations at a higher than average rate, but this is not enough to protect them against determined attackers. It is imperative for this sector to get a handle on system hardening and configuration management practices to improve security and reliability.”
Key findings included:
However, the study revealed that the industrial sector is less effective than other industries in deploying risk management controls and communicating effectively about security. Additional findings included:
“Even though industrial sector organizations are actively considering security risks, they must also improve their willingness to elevate key risks to the executive level,” Melancon continued. “Security risks must be considered in context with overall business risk or the entire organization’s success will be in jeopardy.”
For more information about this survey, please visit: http://www.tripwire.com/ponemon/2013/#industrial.
About the Ponemon Institute
The Ponemon Institute is dedicated to advancing responsible information and privacy management practices in business and government. To achieve this objective, the Institute conducts independent research, educates leaders from the private and public sectors, and verifies the privacy and data protection practices of organizations in a variety of industries.
Tripwire is a leading global provider of risk-based security and compliance management solutions, enabling enterprises, government agencies and service providers to effectively connect security to their business. Tripwire provides the broadest set of foundational security controls including security configuration management, vulnerability management, file integrity monitoring, log and event management. Tripwire solutions deliver unprecedented visibility, business context and security business intelligence allowing extended enterprises to protect sensitive data from breaches, vulnerabilities, and threats. Learn more at http://www.tripwire.com, get security news, trends and insights at http://www.tripwire.com/state-of-security/ or follow us on Twitter @TripwireInc.