Share

Related Links

Related Stories

  • Web 2.0 security issues are costing firms millions says McAfee
    With the rash of Facebook, Twitter and now LinkedIn security scares this last few weeks, most IT managers will be reviewing their Web 2.0 access arrangements for staff in the workplace. And fueling a growing view that serious controls need to be imposed on their usage is a timely report from McAfee that says these services are costing companies a lot of money when mopping up after a problem.
  • Searching for Security
    With more than 30 000 web pages being compromised every day, search engine results could increasingly lead to malware infection. Kari Larsen asks what the search engines are doing to mitigate security threats, and how users can protect themselves
  • Search for security
    With more than 30 000 web pages being infected every day, search engine results could increasingly lead to malware infection. Kari Larsen asks what the search engines are doing to mitigate security threats, and how users can protect themselves.
  • The State of Smartphone Security
    An awful lot of lip service has been paid to smartphone security. Whereas most industry experts agree that, to date at least, smartphone security threats are mainly hype, that doesn’t mean this won’t change. Davey Winder investigates…
  • The Truth About DLP
    Data loss prevention: the term that fills marketing managers with joy, and infosec managers with dread. Preventing a data leak may be the top priority for the IT security team, but is DLP technology mature, and cost effective enough, to be the answer? Stephen Pritchard reports

Top 5 Stories

News

UK IT managers unaware of Web 2.0 security threats

10 June 2009

As part of its Web2.0@Work™ global research project, security specialist Websense Security Labs has found that many organisations in the UK are ill equipped to protect themselves from Web 2.0 threats.

Only 12% of IT managers in the UK believe that the 100 most popular Web 2.0 sites hold the most security threats, whereas according to research from Websense Security Labs, 70% of the 100 most popular sites have hosted or directed users to malicious code, phishing or fraud.

Over a third of the surveyed by Websense said employees have tried to bypass information security policies to access Web 2.0 websites. Although 82% said they had confidence in the organisation’s Web 2.0 security, only 43% reporting they have the tools in place to prevent confidential company data from being uploaded on the web.

Perhaps most shocking, nine percent of IT managers are not sure about their own IT security policies, Websense said.

This is worrying as 57% of the interviewed IT managers believe that Web 2.0 is necessary to their business, and 70% allow access to web-based email services. Three quarters said they feel pressured to allow more access to Web 2.0 sites.

Mark Murtagh, technical director at Websense, said: “As more employees access Web 2.0 tools and applications to enhance their productivity at work, IT departments are currently facing a dilemma. They don’t want to restrict access to these tools yet they are finding it difficult to establish the appropriate Web 2.0 usage policies and offer guidance to their staff.

“To that end, Websense has introduced best practice guidelines to help IT professionals safely harness the power of Web 2.0 within their organisations.”

Websense has made use of Web 2.0 itself, Infosecurity notes, in order to raise awareness by creating a Web2.0@Work – Powered by Websense page on Facebook.

This article is featured in:
Application Security • Internet and Network Security

 

Comment on this article

You must be registered and logged in to leave a comment about this article.