2 - Cross-sector security priorities and issues

Abstract

This chapter presents the results of a cross-sector survey of managers and IT staff across 100 name-brand organizations about the state of IT security policies, plans, and training. In a survey of 100 name-brand organizations in the United States 46% of the organizations reported that the terrorist attacks of September 2001 have not changed their IT management policies or practices at all. Another 17 percent was unsure if the attacks had led to changes in IT management practices. Survey respondents were also asked how the establishment of the Department of Homeland Security (DHS) would change their IT management policies or practices. 47% reported that the new department would not change any IT management practices; 39% did not know if the establishment of DHS would have any impact on IT management practices. Survey respondents were asked if their organizations had an information system (IS) and network security plan in place. While 73% reported that there was an IS and network security plan in place, 7% reported that there was not a plan, and 17% reported that the plan was in the development stages. 59% responded that content and activity on the Internet should not be regulated by the government.