kaspersky smb onderzoek rapport nl jan 2013
DESCRIPTION
Minder dan een vijfde van de werknemers in kleine en middelgrote bedrijven informeert hun IT-afdeling binnen een uur over het verlies van een bedrijfstoestel. Dit blijkt uit een onderzoek onder Europese MKB-bedrijven, uitgevoerd door TNS Infratest, in opdracht van beveiligingsleverancier Kaspersky Lab. Deze uitkomst is zelfs nog alarmerender wanneer rekening wordt gehouden met het feit dat bijna de helft van de IT-managers ervan overtuigd is dat alleen wachtwoordbeveiliging op mobiele apparaten adequate bescherming biedt voor gevoelige bedrijfsgegevens.TRANSCRIPT
©TNS 2012
TNS Infratest
Kaspersky Lab PR Survey 2013 Report Netherlands_V1.0
©TNS 2012
TNS Infratest
Contents
1 Summary 03
2 Survey Information 06
3 Loss of Equipment 10
4 Data Security & Encryption 15
5 Policies & Employment 21
2
Kaspersky Lab PR Survey 2013 - Netherlands
©TNS 2012
TNS Infratest
1 Summary
Kaspersky Lab PR Survey 2013 - Netherlands
©TNS 2012
TNS Infratest
Summary
Loss of Equipment
82% of respondents use Smart Devices for Business Communication.
For around one third a data loss would have a high negative impact.
Most stolen or lost items are USB sticks, facility keys and office equipment.
43% spend less than 5.000€ per year for replacing equipment generally, nearly one third of respondents is not able to amount for electronic devices, 66% of lost equipment is reported within one working day.
Data Security & Encryption
More than 1/3 of mobile devices is to an amount of less than 10% connected to the corporate network, on average 10% of respondents do not have any information about connection to corporate network. 37% working outside the office are 2 days or more a week connected to corporate network, 1/3 of respondents is nearly never connected.
Only 32% of respondents have a clear picture of business data carried out on employee-owned devices.
30% state a full encryption for all mobile devices.
Only 20% made a cost evaluation for encryption vs. data loss; result with no clear ratio tendency.
48% do not see an advantage of encryption instead of mandatory password.
Loss of Equipment / Data Security & Encryption
4
Kaspersky Lab PR Survey 2013 - Netherlands
©TNS 2012
TNS Infratest
Summary
Policies & Employment
Around 45% of respondents estimate an advantage for recruiting allowing usage of employee-owned mobile devices.
13% stated a job declination because of IT-related issues (such as no social media allowed, no notebook / laptop or smart phone provided).
15% report a drop out during the probationary period / first months of employment due to IT-related issues.
Policies & Employment
5
Kaspersky Lab PR Survey 2013 - Netherlands
©TNS 2012
TNS Infratest
2 Survey Information
Kaspersky Lab PR Survey 2013 - Netherlands
©TNS 2012
TNS Infratest
Survey information
7
Fieldwork & Method
• 11th-28th January 2013 • Usage of Lightspeed Research Access Panel (LSR) for all countries • Online Interviews
Countries • Belgium • Denmark • Finland • France • Germany • Italy • Netherlands • Norway • Portugal • Spain • Sweden • UK
N=166 … … … … … N=180 … … … … …
Target Persons • IT Decision Makers and Influencers (LSR B2B Access Panel) • in companies with 10-500 employees
Topic • PR-Survey about data security and encryption on mobile devices
Questionnaire • Identical questionnaire for all countries • 10 minutes (22 questions), statistics
Kaspersky Lab PR Survey 2013 - Netherlands
©TNS 2012
TNS Infratest
63
28
9
10-99
100-249
250-500
Statistics (1/2)
8
9
23
17
47
3 solely responsible
primary decision-maker
specialist decision-maker
influencer
expert
SQ2.
Role description
SQ1.
Employees at Company
50 50
Influencer
DecisionMaker
Role combined
% %
%
Kaspersky Lab PR Survey 2013 - Netherlands
SQ1. How many employees work at your company in total? N=180 SQ2. Which of the following statements describes your role in decision-making in your company with regard to purchasing, provider selection or fundamental changes in the context of IT hardware, software or services? N=180
©TNS 2012
TNS Infratest
Statistics (2/2)
9
9
16
14
17 7
2
11
10
6
7 2
Owner
IT
Purchasing
Finance / Accounting
Sales / Marketing
After Sales / Service
Product / Service
Production / Logistics
HR
other
no answer
SQ3.
Company Department
SQ3: Which company department do you work for? N=180
Kaspersky Lab PR Survey 2013 - Netherlands
©TNS 2012
TNS Infratest
3 Loss of Equipment
Kaspersky Lab PR Survey 2013 - Netherlands
©TNS 2012
TNS Infratest
Mobile Devices and Impact of lost data
82
16 3
yes no don't know
Usage of Smart Phone / Blackberry for business communication
Q4. Do your employees use smart phones or Blackberry devices (their own or company-issued) for business communications? N=180
Q5. What would be the impact to the business if the corporate data stored on an employee’s smart phone / Blackberry device was lost? N=147
2
12
13
45
27
2
catastrophic
significant
minor
negligible
impossible to estimate
don't know
Impact of lost data
• More than 80% use Smart Devices for Business Communication • For around one third a data loss would have high negative impact
%
%
11
Kaspersky Lab PR Survey 2013 - Netherlands
©TNS 2012
TNS Infratest
39
38
37
29
26
24
15
11
11
11
4
18
%
16
10
13
8
6
13
2
6
3
3
%
Lost or stolen items – Top List
USB keys / sticks
Chargers for phones or computers
Office equipment
Folders
Smart phone / Blackberry
Keys to access facilities
Key company vehicle
Laptop / notebook computer
Tablet Computer
Company clothing
other
don’t know / no answer
Q6. From the following list, please select the three corporate items lost most regularly by your employees (or stolen from them) N=180 / multiple answers
• USB stick, chargers and office equipment among Top 3 • If lost or stolen, top 1 is USB sticks followed by facility keys and office
equipment Top 1-3 selection Top 1
12
Kaspersky Lab PR Survey 2013 - Netherlands
©TNS 2012
TNS Infratest
28
22
25
16
5 3 1
%
Replacing lost / stolen equipment per year
20
18
25
18
11
4 4
%
50.000 to < 100.000€
25.000 to < 50.000€
10.000 to < 25.000€
5.000 to < 10.000€
1.000 to < 5.000€
less than 1.000€
don't know / no answer
Q7. Overall, how much do you spend replacing lost or stolen employee equipment each year? N=180
Q8. Of this, how much do you spend each year replacing lost or stolen smart phones, Blackberry devices, tablet computers and laptops / notebooks? N=148 (respondents who spend more than 1.000€ / year)
• 43% spends less than 5.000€ per year for replacing equipment • Nearly one third is not able to number amount for electronic devices
General spendings Spendings for electronic devices
13
Kaspersky Lab PR Survey 2013 - Netherlands
©TNS 2012
TNS Infratest
Replacing lost or stolen equipment per year
17
29
20
11
4 2
17
an hour half a
working
day
a working
day
half a week a week more than
a week
don't know
%
Duration of loss reporting
Q9. How long does it usually take your employees to report the loss of a mobile device? N=180
• 66% of lost equipment is reported within one working day
14
Kaspersky Lab PR Survey 2013 - Netherlands
©TNS 2012
TNS Infratest
4 Data Security & Encryption
Kaspersky Lab PR Survey 2013 - Netherlands
©TNS 2012
TNS Infratest
Usage and connection of devices
19 20 23
19
12
6
33
14 15 17
11 9
%
Smart Phones / Blackberry Devices
Q10. Do you know how many of your staff use employee-owned Smart phones / Blackberry Devices for business purposes? N=180
Q11. Do you know how many employee-owned Smart phones / Blackberry Devices are connected to your corporate network? N=180
16
9
23 22 23
7
33
9
21
14 13 10
%
Laptops / Notebooks
Q10. Do you know how many of your staff use employee-owned Laptops / Notebooks for business purposes? N=180
Q11. Do you know how many employee-owned Laptops / Notebooks are connected to your corporate network? N=180
30
18 21
13
8 9
37
12
17
13 11 11
%
Tablet Computers
Q10. Do you know how many of your staff use employee-owned Tablet Computers for business purposes? N=180
Q11. Do you know how many employee-owned Tablet Computers are connected to your corporate network? N=180
• More than one third of mobile devices is to an amount of less than 10% connected to the corporate network
• On average 10% of respondents do not have any information about connection to corporate network
16
Kaspersky Lab PR Survey 2013 - Netherlands
©TNS 2012
TNS Infratest
30%
11%
17%
8%
29%
5%
almost never
a day once or twice a month
one day a week
two days a week
more than 2 days a week
Don’t know / no answer
Connection to corporate network • 37% working outside the office is 2 days or more a week connected to
corporate network • One third is nearly never connected
Amount of working time outside the office
Q22. How much of your working time do you personally spend outside the office and connected to the corporate network (including working at home)? N=180
17
Kaspersky Lab PR Survey 2013 - Netherlands
©TNS 2012
TNS Infratest
Data Security of mobile devices
32
46
14
7
Yes, complete overview
No, but reasonable
overviewNot at all
%
Q12. Do you have a clear picture of all the business data carried on employee-owned devices? N=180
Overview of business data on devices
• Only one third of respondent have a clear picture of business data carried out on employee-owned devices
• 30% state a full encryption for all mobile devices
Encryption of devices
30%
18%
16%
10%
7%
6%
0%
13%
All mobile devices (smart phones,tablets and laptops/notebooks) are
fully encrypted
Only laptops / notebooks are
encrypted, but the full disk
We trust our employees to implementappropriate security by themselves
We only encrypt certain sensitive files
Only some folders on laptops /notebooks are encrypted
Only mobile phones are encrypted
Other, please specify
Don’t know / no answer
Q13. How does the company secure mobile devices that are used for work purposes (including both employee-owned and company-owned)? N=180
18
Kaspersky Lab PR Survey 2013 - Netherlands
©TNS 2012
TNS Infratest
Costs of encryption
Evaluation of costs for encryption
Q14. Have you ever evaluated how much it would cost your business to introduce full encryption for all mobile devices? N=180
17
26
36
21
%
yes
no, too expensive
and complicated
no, not essential
don't know / no
answer
71
24
5
yes
no
don't know
Q15. Have you compared that cost again the potential financial impact of unencrypted data loss? N=38
Impact of unencrypted data loss
33% State that encryption is more expensive than
data loss
4% State a ratio 1:1
37% State that data loss is more expensive than encryption 26%
Don’t know
Q16. If yes (Q15), what was the ratio between them? (ratio costs for encryption vs. costs of data loss) N=27 (low base!)
• Only a fifth has made a cost for encryption/ loss of data evaluation • Ratio of encryption cost vs. data loss shows that a third states a
negative and 37% a positive ratio towards encryption
%
19
Kaspersky Lab PR Survey 2013 - Netherlands
©TNS 2012
TNS Infratest
11%
37%
24%
11%
2%
4%
11%
1
2
3
4
5
more than 5
Don’t know / no answer
Protection and devices
48
31
21
yes no don't know
%
Q17. Do you think that mandatory password protection for all mobile devices used for work purposes would protect business data as effectively as encryption N=180
Protection by mandatory password
• 48% do not see an advantage of encryption vs. mandatory password
Amount of mobile devices
Q18. How many mobile devices do you personally use for work-related activity? N=180
20
Kaspersky Lab PR Survey 2013 - Netherlands
©TNS 2012
TNS Infratest
5 Policies & Employment
Kaspersky Lab PR Survey 2013 - Netherlands
©TNS 2012
TNS Infratest
Policy and Employment
7
37
32
9 8 7 7
40
21 18
8 6
definitely yes probably yes neither yes nor
no
probably no definitely no don't know / no
answer
%
Advantage and disadvantage of policies in recruiting
Q19. Do you believe that a policy of allowing employees to use their own personal devices for work give firms an advantage when recruiting new staff? N=180
Q20. Do you believe that strict IT usage policies for employees gives firms a disadvantage when recruiting new staff? N=180
• Same amount of respondents (44 & 47%) estimate an advantage as well as a disadvantage of strict or tolerant policies
22
Kaspersky Lab PR Survey 2013 - Netherlands
©TNS 2012
TNS Infratest
Impact of IT issues on new employees / candidates
13
69
18
yes no don't know
%
Q21a. Has a candidate ever declined a job offer at your company because of IT-related issues (such as no social media allowed, no notebook / laptop or smart phone provided etc.)? N=180
Declination of job offer
• 13% stated a job declination • 15% can report a drop out
15
65
20
yes no don't know
%
Q21b. Has a new employee ever left your company during the probationary period / first months of employment due to this? N=180
Left company during first months
Kaspersky Lab PR Survey 2013 - Netherlands 23