|
The Collaborative Internet: Usage Trends, Employee Attitudes and IT Impacts
Fourth Annual Survey, October 2008
Security Incidents and Cost
Impact of Internet Application Usage
Three in four IT respondents (73 percent) report incidents resulting from the
Internet applications measured in the survey. While software-related incidents
are most common, including viruses (59 percent) and spyware (57 percent), human
errors are also relatively widespread: four in ten IT respondents cite
violations of corporate or regulatory policies that govern computer usage (37
percent) and around one in four have reported issues resulting from
unauthorized dissemination of information (27 percent).
On average IT respondents report a monthly average of 34 greynet-related
incidents that require some kind of remediation, which may range from PC repair
to identifying and fixing information leaks. On average, it requires 22 hours
of time to identify, assess, and repair these incidents
| |
Any Company |
From 1 to 99 employees |
100 to 999 |
1000 to 4,999 |
5,000 or more |
| Avg Number of Incidents |
34 |
10 |
17 |
20 |
68 |
| Avg IT hours per incident |
22 |
22 |
19 |
17 |
27 |
| Estimated Monthly cost (@ $70 per hour) |
$52,360 |
$15,400 |
$22,610 |
$23,800 |
$128,520 |
Assuming an average hourly wage of $70 per hour, monthly costs associated with
these incidents are quite high.
Remediation time varies by type of incident. IT respondents who have
experienced unintentional information leaks, for example, report larger average
remediation times. Note that the columns are not mutually exclusive: that is,
some respondents experience more than one type of incident.
| |
Avg Monthly Incidents |
Avg Hours To Remediate |
| Any incident |
10 |
22 |
| Virus, Trojans or worm infections |
12 |
17 |
| Spyware and other malware |
12 |
18 |
| Rootkits, bots and botnets |
7 |
32 |
| Unintended info leaks |
18 |
34 |
| Non-compliance with policy |
18 |
35 |
|