10/01-05   -   Pressmeddelande

Nordic IT Security: Products Are Not Enough, Security Policies Are Just as Important, Says IDC

According to an IDC survey of 600 Nordic companies on security, attacks are still successful, despite efforts by companies to implement antivirus software and firewalls. The survey reveals that hackers have become smarter and have found new ways to exploit weak points in companies´ IT infrastructures, with attacks now often concentrating on user behavior, which has put the user in a central position. User awareness and enforcement, however, are big issues in all four Nordic countries.

Challenges in Managing the Security Infrastructure
(see figure)

Note: N = 606
Source: IDC, 2005

Security policy scored highest when survey respondents were asked about which technologies they planned to implement. This is not surprising, given the exploitation of users by hackers and the very high penetration of antivirus and firewall protection products. The focus now, however, is moving from products to different types of services, as users respond to increasing threats and vendors seek new revenue sources to sustain growth.

However, investment in the current security infrastructure remains huge and continues to increase at a faster pace than other IT investments.

In all four countries, security-related investments are increasing at a higher rate than other IT investments. Sweden and Denmark are increasing their investments in security the most, at around 10% more than average IT growth.
The survey also shows that there is evidence that management focus on plans and strategies to prevent or anticipate coming incidents pays off in IT security. The results show that there is a positive correlation between management involvement and implementation of security products and processes, resulting in fewer incidents.

The market is slowly maturing and what IDC has said for a long time now — that investment in security should not be regarded as an insurance premium, but as a business enabler — is beginning to take root.

For more analysis of the survey results, please see the following IDC surveys:
Sweden IT Security Products and Services Vendor Shares 2003 and Forecast, 2004–2008 (IDC #SE560461L, November 2004)
Norway IT Security Products and Services Vendor Shares 2003 and Forecast, 2004–2008 (IDC #NO560464L, November 2004)
Finland IT Security Products and Services Vendor Shares 2003 and Forecast, 2004–2008 (IDC #FI560463L, November 2004)
Denmark IT Security Products and Services Vendor Shares 2003 and Forecast, 2004–2008 (IDC #DK560462L, November 2004)
To purchase the studies, please contact your local IDC office or visit www.idc.com.

IDC analyst Nils Molin, who carried out the security survey, will be available to meet at IDC´s Directions 2005: Denmark conference, in Copenhagen on January 25, 2005. For more information about the conference, please visit www.nordic.idc.com/dir05.

About IDC
IDC is the premier global market intelligence and advisory firm in the information technology and telecommunications industries. We analyze and predict technology trends so that our clients can make strategic, fact-based decisions on IT purchases and business strategy. Over 700 IDC analysts in 50 countries provide local expertise and insights on technology markets. Business executives and IT managers have relied for 40 years on our advice to make decisions that contribute to the success of their organizations.

IDC is a subsidiary of IDG, the world´s leading technology media, research, and events company. Additional information can be found at www.idc.com
# # #

All product and company names may be trademarks or registered trademarks of their respective holders.