1 in 10 IT professionals admit to cheating to get an IT audit passed
However it isn’t all bad news; compared to a similar survey conducted in 2009 the number of people admitting to cheating has halved in number.
Amongst those who have cheated lack of time and resources are cited as the main reasons, underlining the ever increasing pressure on today’s IT departments. With 25% responding that firewall audits take a week to conduct attempting to avoid this painful process is understandable if not excusable.
What’s more 30% of respondents only audit their firewalls once every 5 years and even more worrying 7% never even conduct an audit. With this in mind it’s less surprising to find out that 36% of IT professionals admit their firewall rule bases are a mess increasing their susceptibility to hackers, network crashes and compliance violations.
The survey also found that:
· 31% only audit their firewalls once a year
· 22% don’t know how long it takes to audit their firewalls
· Of those that admit their firewall rule base is a mess, 25% believe this makes their network susceptible to crashes and 38% susceptible to compliance violations
· 56% responded that automation tools would save them a lot of time
While companies pay a lot of attention to the firewalls selection process, and invest millions in acquiring it, much less attention and resources are invested in making sure the firewalls are optimized at all times for potential security risks and compliance breaches.
Michael Hamelin, Chief Security Architect at Tufin Technologies said: “It is a cause for concern that so many companies are only conducting audits sporadically and are admitting that their firewalls are in a mess. The consequences of a firewall with rules that are out of sync leave networks open to exploitation. Without the right automation tools, managing firewalls is complicated and time consuming making it very tempting for IT professionals to cheat to get their audit passed. But in the long run it will only cause more problems.”
Despite our gloomy economic environment it is encouraging to see that IT has remained high on the budget priorities with 59% of companies revealing that they have not been forced to focus on cost savings at the expense of their company’s security. With malware at record highs and more and more compliance legislation businesses are clear that it is not in their interests to cut IT spend.
Print version | 
Email to a friend | 
View other articles
Latest IT, computer and network security articles
Honda New Zealand deploys FortiGate appliances for broad network security protection
Check Point receives NIAP's Common Criteria EAL4 Certification for Media Encryption
UK companies fail to take advantage of new IT technology
How to pass your firewall audit with flying colours
Large proportion of remote users access their networks without any for form of authentication
Spam campaign exploits the HMRC tax errors
McKay deploys 3ami Monitoring and Audit System to safeguard its intellectual property against theft
Cloud-based Infrastructure as a Service save up to 55 percent of IT operations spend
...[view more IT, computer and network security articles]...
Other IT, computer and network security Resources
Security websites for specific products:
Access control and RFID systems - Burglar alarm, intruder alarm and fire alarm systems - Biometric recognition and identification systems - CCTV cameras and systems - IT, computer and network security systems - Health and safety - Security guard services - Surveillance and remote monitoring systems
Security websites for specific markets:
Bank and financial security - Corporate security - School and education security - Sport event and live venue security - Healthcare and hospital security - Hotel restaurant and casino security - Industrial and manufacturing security - Infrastructure and Utilities security - Home and personal security - Public sector security - Retail security - Small Business security - Transport security
