Local Companies Overlook Internal Network Security

Many local companies failed to make proper provisions for endpoint security – the strategy to manage end-user devices connecting to the internal network, thereby making them vulnerable to operational disruptions and financial losses, according to a recent survey conducted by the Hong Kong Productivity Council (HKPC).

Commissioned by network security solutions supplier McAfee, the survey covered the endpoint security status and trends in Hong Kong, the extent of computer intrusions at end-user level, the level of information security awareness, technologies adoption, and the strategy employed for endpoint security. A total of 1,000 companies were interviewed in October 2007.

The survey found that 43.4% of the respondents were hit by computer viruses in the past 12 months, while 18.0% and 5.7% suffered from spyware and hacking attacks respectively. Despite this, close to 48% of these companies did not install anti-spyware or personal firewall in their computers while another 30.9% failed to patch software vulnerabilities on a regular basis.

Another key finding from the survey indicated that "intrusion prevention systems" (21.4%), "integrated security software" (29.6%), and "network access control" (30.4%) – tools that commonly deal with endpoint security - as the three least applied IS technologies by the companies.

According to Mr Roy Ko, Principal Consultant (Information Technology Industry Development) of HKPC, the survey findings exposed serious flaws on endpoint security among local companies such as a lack of control over endpoints, and management's failure to learn from past mistakes and take remedial actions.

"It is worrying that the security measures taken were neither satisfactory nor adequate. Allowing this situation to continue will increase companies' vulnerability to severe operational disruptions and heavy financial losses," he said.

"HKPC strongly urges companies to understand the impact of endpoint security to their organizations, apply the necessary security measures, and allocate adequate resources to implement them."

The full report of the "Endpoint Security Survey" can be downloaded from the HKPC website (www.hkpc.org). For further information about the survey and HKPC's information security services, please contact Ms Jennifer Ng at tel. (852) 2788 5851 or email: jennifer@hkpc.org . For other media enquiries, please contact Mr Felix Chan at tel. (852) 2788 5036 or email: felixchan@hkpc.org

* * *

Ms Helene LI
General Manager
Corporate Communications
Tel: (852) 2788 6390
Fax: (852) 2788 5056
E-mail: heleneli@hkpc.org
Website: www.hkpc.org

16 November 2007