Jay Heiser
Heiser: It isn’t so much the traditional virus that is an issue now as stealth malware

Managing risk: The analyst’s view

Increasing security threats require strong management strategies

Written by Steven Hickey

A growing range of security threats and potential sources of information leakage mean IT leaders need to ensure their risk management strategies are up to scratch, says Gartner research vice president Jay Heiser.

“I would say the majority of our clients are experiencing acceptable rates of failure associated with traditional security areas – they are not the major issue. But the level of attacks continues to be ratcheted up and the bar continues to be raised,” he says.

“It isn’t so much the traditional virus that is an issue now as stealth malware – that is trying to steal data, most commonly passwords and log-ins. And there are various levels of industrial espionage-ware.”

For Heiser, the seemingly age-old threats of viruses and hacking have been joined by an ever-proliferating number of new menaces, some of which firms have brought on themselves.

Despite speculation and postulation, it is probably still too early to point the finger at social networking as a specific threat to the integrity of corporate processes. But other online information is already posing a risk to business integrity.

“Right now we are taking a good hard look at Google in terms of the amount of information available and what can be done with it by sophisticated attackers able to correlate relatively basic information and make it into something that is much more significant,” he says.

“Innocent things people do – even in their personal lives, if they provide information about their corporate activity – can impact on their company.”

Heiser also advises a keen corporate focus on reputation awareness. “It is imperative that businesses keep an eye on what is being said about them on the web,” he says.

“Ultimately it might be insoluble but certainly you can spend more time monitoring what is said about you on the internet and you can subscribe to services that help you do that.

“Some policies are probably necessary and a growing number of companies are going to have to work out arrangements with their employees around what level and type of blogging is considered appropriate in their spare time.”

reader comments

related articles

Roulette wheel

Risky business

From hackers to natural disasters, risk management is a vital tool for protecting your organisation 17 Apr 2008

 

Managing risk: The view from the private sector

A proactive approach to risk management reaps a number of rewards 17 Apr 2008

Managing risk: The analyst’s view

Increasing security threats require strong management strategies 17 Apr 2008

Managing risk: The view from the public sector

Risk management can play a vital role for local authorities 17 Apr 2008

Shape-shifting malware hits the web

Cyber-criminals changing malware signatures every few hours 15 May 2008

Cyber-criminals launch PDF malware offensive

PDFex storms into the charts 01 Nov 2007

Malware writers gear up for bumper 2008

Let's be careful out there 18 Jan 2008

related whitepapers

today's top stories

Learning from the credit crunch to avoid a broadband crunch

While it might be the most pressing issue de jour , the financial system isn’t the only area where government needs to... 10 Oct 2008

How careerism can warp IT procurement

Many working in IT put their career interests before those of their employer when weighing up purchasing options 10 Oct 2008

City in pressing need of skilled IT matchmakers

With the financial services sector plunging ever deeper into an M&A maelstrom, IT leaders are having their systems integration skills and due diligence expertise tested as never before 09 Oct 2008

The definitive guide to software development

Five key trends and five best practice tips to help you improve your programming capabilities 09 Oct 2008

Computing podcast - IT implications of the banking crisis, and the FSA clamps down on IT security

We discuss the effect of shotgun mergers and acquisitions on financial services IT staff, and examine the industry regulator's plan to fine directors for information security breaches 09 Oct 2008

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Jobs

Related jobs

Job of the week

Job alerts

Sign up here

Find your next job


IT Salary Checker

Check salary here

Advertisement

White papers

Search white papers

Top categories

VPN, Extranet and Intranet Solutions

WAN/ LAN Solutions

Network Security

Interoperability-Connectivity

Grid/ Utility Computing

Latest poll

Would you apply for a job that was advertised on Facebook or a similar social networking site?

Would you apply for a job that was advertised on Facebook or a similar social networking site?

The government is using Facebook to recruit IT staff - would you apply to such an ad?

Previous poll results

Latest audio and video articles

programming codeVideo

The definitive guide to software development

Five key trends and five best practice tips to help you improve your programming capabilities 09 Oct 2008

Podcast imageAudio

Computing podcast - IT implications of the banking crisis, and the FSA clamps down on IT security

We discuss the effect of shotgun mergers and acquisitions on financial services IT staff, and examine the industry regulator's plan to fine directors for information security breaches 09 Oct 2008

Latest in-depth articles

Financial Services Authority buildingAnalysis

FSA threatens executives with fines

Senior management to be held accountable for security lapses at banks 09 Oct 2008

Comment

Broadband must be a spending priority

For the economic health of the nation, the government would do better to bankroll an optical fibre rollout rather than prop up profligate banks 09 Oct 2008

Advertisement

Primary Navigation