| Characteristic | Percentage of repondents |
|---|---|
| Defined a specific policy regarding the classification and handling of sensitive information | 72% |
| Employee awareness programs | 68% |
| Implemented additional security mechanisms for protecting information (e.g. encryption) | 57% |
| Locked down or restricted use of certain hardware (e.g. USBs, Firewall ports) | 43% |
| Used internal auditing for testing of controls | 41% |
| Defined specific requirements for telecommuting/telework regarding the protection of information that is taken outside the office | 39% |
| Implemented data loss prevention tools (e.g. McAfee, Symantec) | 38% |
| Implemented log review tools | 38% |
| Restricted use of instant messaging or email for sensitive sata transmission | 31% |
| Prohibited use of camera devices within sensitive or restricted areas | 23% |
| Restricted access to sensitive information to specific time periods | 16% |
The chart is not accessible to screen readers. Please switch to the table view to access the data.
Loading statistic...
Download
Source
Source
Release date
November 2012
More information
Region
Worldwide
Survey time period
May to July 2012
Number of respondents
1,836*
Special properties
CIOs, CISOs, CFOs, CEOs and other information security executives
Method of interview
Face-to-face interview, online survey
Supplementary notes
* Ernst & Young received feedback from nearly 1,836 CIOs, CISOs, CFOs, CEOs and other information security executives from 64 countries and across all industry sectors.
Citation formats
