Notice Board - News

Internet Safety - better practices needed

Netsafe - the Internet Safety Group, Auckland

The Internet Safety Group (ISG) has released the results of a new online survey of the cybersafety and security practices of small to medium enterprises (SMEs) across New Zealand. These results highlight some of the serious risks online for SMEs and some of the strategies that need to be employed to minimise those risks.

This survey offers an in-depth look at the network security practices, as well as the policy and procedure infrastructure that SMEs have established to protect their information and communication technologies (ICT). Given that small to medium enterprises are crucial to the New Zealand economy, the risks for SMEs online, and the way those risks are managed, are important areas of study.

This online survey was conducted over a number of months and included 33 questions about current practices regarding security and cybersafety. Specific issues included networking, use of security software, backup procedures, and workplace ICT policies. Although a small sample completed the survey (131 of 169), the results are a clear indicator of the needs of this sector.

These findings are timely given the ISG's current six month campaign to raise awareness about the Net basics (also referred to as a computer WOF — Warrant of Fitness). Campaign messages focus on the importance of a computer operating system, anti-virus software and a firewall, which are all regularly updated. Other messages include the need for spyware detection, and use of a 'strong' password.

Liz Butterfield, Executive Director of the ISG says, "These results show that 89% of SMEs surveyed report having sensitive or confidential information stored on their computer systems, yet 73% report having experienced a security incident in the last year.

Of particular concern is that 48% have no policies governing use of ICT in the workplace, and 35% don't even have the accountability of unique logons or passwords. These findings would certainly explain why 36% report unauthorised material on their machine, yet only 8% have ever disciplined an employee for misuse."

"If we can assist SMEs in identifying risks online, and in implementing straight-forward and cost-effective ways of addressing those risks, I think we can help this sector to flourish in the dynamic e-commerce environment," adds Ms. Butterfield.

(Media release: 28 November 2005)

Further details

Download the "Small and Medium Enterprise Survey 2005" from www.netsafe.org.nz (Adobe PDF, 98 KB)

or scroll down for the Key Findings.

Links to associated information at NetSafe

NetSafe Net Basics
This campaign is designed to help every Kiwi get their computer set up with at least a basic level of protection.

NetSafe home computer survey highlights need for security basics
Internet Safety Group - 23 October 2005
70% do not have the Net basics in place and 42% reported had 'lost files, data and/or had operating difficulties'.
Download the "Home Computer Security Survey 2005" from www.netsafe.org.nz (Adobe PDF, 106 KB)

New Zealand's First Online Security Day
The Internet Safety Group proposes 30 November as New Zealand Online Security Day to help keep New Zealanders informed about the latest online security threats and the best strategies for minimising those risks.

Key findings

• 50% allow employees to take data out of the office on portable devises (e.g., PDAs, laptops, pen drives, etc.), though only 21% have a confirmed policy for protecting that data.
  
• 89% have electronically stored information that is confidential, sensitive, and/or private.
  
• 25 operate wireless networks (19%), though 4 of these do not have confirmed security settings in place.
  
• 21% allow employees to connect remotely to their network, though 8% do not have confirmed security settings in place for this.
  
• 73% reported a computer security incident In the last 12 months. The most common included spyware/adware (46%), viruses (41%), worms (24%), and Trojans (20%).
  
• 73% perform regular data backups, but only 60% check that these backups are useable.
  
• Most (95%) have antivirus software. 82% of those 'auto-update' that software.
  
• 84% use a firewall. 68% of those 'auto-update' their firewalls.
  
• 69% 'auto up-date' their operating systems.
  
• 71% have spyware/adware detection software. Only 44% of those 'auto-update' that software.
  
• 35% of respondents who use ICT do not have a 'unique logon' and password for their employees.
  
• 36% of SMEs reported that unauthorised material (e.g., games, pornography, music, etc.) was found on company computers.
  
• Only 8% have ever disciplined an employee for ICT misuse.
  
• 72% do not know to which authorities to report ICT-related security incidents.
  
• 48% do not have any ICT computer security policies or documents. Of those that had at least one ICT policy or document, the most common were those on 'acceptable use of the internet' (52%), 'acceptable use of email' (48%), and 'password management' (48%).
  
• Only 31% had educated/trained employees on all of their ICT policies, and only 15% had employees sign a document acknowledging acceptance of their policies.
  
• Nearly half (44%) have an ongoing ICT security awareness program in their company.
  
• 76% felt there was a 'growing need' for ICT security to protect their business and personal information.

Further information

Download the "Small and Medium Enterprise Survey 2005" from www.netsafe.org.nz (Adobe PDF, 98 KB)

View links to associated information at NetSafe