Download Zone

Information Security Survey

Name of Survey:

Information Security Survey

Survey Background:

Initiated by HKPC in 2000, the Information Security Survey is conducted annually to evaluate local companies' awareness of information security.

Survey Objectives:

• To evaluate local companies awareness of information security

• To keep track of the extent of computer intrusions experienced by local companies and their response actions, technology adoption, security management and manpower policies

Funding Organization / Implementation Agent:

The survey is jointly conducted by the Office of the Government Chief Information Officer (OGCIO), the Hong Kong Computer Emergency Response Team Co-ordination Centre (HKCERT) of HKPC and the Technology Crime Division of the Commercial Crime Bureau of the Hong Kong Police Force.

Survey Period:

• Annual surveys - since 2000

• Latest survey: November – December 2004

Sample Size & Methodology:

The latest survey was conducted in November and December 2004 and involved telephone interviews with 3,000 locally registered companies that had been selected by proportional sampling from 10 major industrial sectors.

Highlights of the Latest Survey Findings (December 2004):

The awareness of information security among local companies has generally improved over the past year. In particular, companies using 'firewall' to protect their computer systems have significantly increased by 20 percentage points (from 45% in 2003 to 65% in 2004). Companies deploying advanced security measures have also increased from 17% to 21% as compared to the last survey in 2003. Majority of these companies came from the banking and finance (37%), manufacturing (33%), and transport and communication (27%) sectors.

A point to note is that companies not using any security technologies have dropped from 10% in 2003 to 4% in 2004.

Regarding security technologies deployed by local companies, the most common measures were 'anti-virus software' (91%), 'physical security' (66%), 'firewall' (65%) and 'password' (61%).

The survey found that 'computer virus' (95%) was still the prevailing type of computer attack, followed by 'denial of service' (21%) and 'hacking' (6%). While almost half of the respondents (47%) did not know the origin of attacks, 43% conceded that the attacks originated from overseas.

18% of respondents with servers and/or websites were victims of computer attacks in the past 12 months. Among them, 52% reported 2 to 4 incidents during the year. A total of 3,464 computers were involved in the victimized companies during the same period, a further drop of 16 percentage points compared to last year, while a decrease of 30 percentage points in financial loss, totalling HK$853,150, was recorded. Among companies that suffered computer attacks in 2004, the average financial loss per company also decreased by 16 percentage points compared to the previous year.

 

Enquiry:

Ms Roy Ko
Centre Manager
HKCERT
Tel: (852) 2788 5882
E-mail: roy@hkpc.org

  

Download:

Download Full Report (November - December 2004)

Back

Privacy Statement    Use of this site indicates you accept the Terms of Use.
© 2000 - 2005 Hong Kong Productivity Council
Created by ME