Pete Finnigan's Oracle Security Weblog

I saw at the weekend that the DTI's security breach survey for 2006 had been released in April. This is an interesting survey produced by PWC for the DTI (Department of Trade and Industry). The "DTI Information Security Breaches Survey 2006 – full survey results" details links to the executive summary and also to the full report. I have read the "executive summary" which makes interesting reading on a number of levels. First is that at a high level there seems to be improvement since last time the survey was done in 2004. At a lower level though the figures tell a different story and it seems to be about expenditure and budget. A shocking 14% of companies do not spend any of their budgets on security! and 18% of big companies admitted they had discovered users sharing ID's and performing unathorised access to systems. It makes interesting reading.