It's Raining IT Security Surveys

Bob Brown writes "It seems like there are more surveys pumped out on IT and network security threats these days than there are threats themselves. This story examines why vendors are cranking these surveys out so frequently and what people think about it."

Comments

Way to mess up the rhyme and meter!

[temojen]

It's raining IT Security Surveys
Hallelujah
It's raining IT Security Surveys

Just doesn't work.

Advertisements

[jlarocco]

It's simple, really:

1. Post a BS security threat survey on a website packed to the brim with advertisements
2. Get on front page of /.
3. Profit.
4. Repeat steps 1-3 with a survey of security threat surveys

Well, obvious reason: There's money in it

[Opportunist]

Security has finally become an issue. Until recently, it was none. "Hey, it works, we don't need to invest more" has been management's creed when it comes to IT.

Now, we have a few cases of security breaches, phishing attacks and so on. The media jumped the wagon and ride the hype further. So execs go out of their IT hibernation and start looking around for security experts to fix their holes. Either after damage is done or (less frequently) to prevent damage.

So how do you get those execs to pick YOU as the company to do security for them? Security is, after all, a highly lucrative business, a full audit of your page or net can cost in the 5-6 digit range.

You start pumping security bulletins. It's not so much the need to show there is a threat. It's more to show that YOU know it, YOU can handle it, YOU have experience and YOU are the company that should get the contract.