74 Percent of Security Executives Concerned About Impact of Payment Card Data Loss.

According to Real-Time Survey Conducted at Jericho Forum Conference, InfoSecurity Europe, Over 90 Percent of European Security Professionals Polled Believe Networks Will Be Deperimeterized in Five Years' Time

LONDON -- Qualys, Inc., the leading provider of on demand security risk and compliance management solutions, today announced that 74 percent of European senior security executives see the impact of payment card loss on brand reputation as their biggest concern. In addition, the majority of European professionals - over 90 percent - are already preparing for deperimeterization. These and other findings come from a live survey of over 80 security professionals conducted at the Jericho Forum Conference at the InfoSecurity Europe tradeshow this week.

The poll was carried out by Qualys in association with the Jericho Forum and featured twelve key questions relating to business issues of importance to senior security executives. Qualys had conducted a similar survey at the CSO Interchange event held at the RSA tradeshow in San Francisco in February. Results highlight key differences between security preconceptions of U.S. executives as compared to their European counterparts.

"The fact that the majority see the effect of data loss on brand reputation as their biggest concern not only demonstrates the awareness built by incidents such as the TJ Maxx data breach but clearly also reflects on the changing role of CSOs today. No longer are security professionals pure technologists. They are now taking on more responsibility on a corporate level and realize that security needs to be moved higher up the business agenda," said Philippe Courtot, CEO and chairman of Qualys, who opened the Jericho Conference earlier this week with a call to action for vendors to support Jericho by rising to the challenge of designing to the Jericho Blueprint.

The survey also shows that European professionals are ahead of their U.S. counterparts in relation to deperimeterization. 90 percent believe it will happen in the next five years and that companies will not be operating with a hardened perimeter. In contrast, U.S. executives will demonstrate some reliance still on a perimeter for corporate security.

"European organizations have clearly grasped the fact that deperimeterization will happen in the next five years. It's clear that Europeans are far better prepared to address future security business needs than their U.S. colleagues and are preparing to embrace a perimeter-less future," said Paul Simmonds, Global CISO for ICI and Jericho Forum board member.

However, Europeans need to catch up with U.S. counterparts in regards to PCI compliance. Only 39 percent of Europeans are currently acting on the need for PCI compliance whereas in the U.S. 63 percent are active. In the U.S. there is greater pressure to drive incidents such as TJX into the open and in Europe there is no directive on disclosure.

Over 50 percent of executives on both sides of the Atlantic see compliance as the biggest driver in their security strategy.

Other key findings from the survey show:

* 69 percent of European executives believe that insider threats pose more serious problem than threats from outside the organization. Considering 80 percent of security budget is spent on strengthening the perimeter, this suggests a real need to shift the focus.

* Europe is more reliant on ISO 17799 with over 82 percent of professionals using it within their company and 15 percent of these already certified.

* In relation to security metrics, Europe was somewhat behind with 39 percent currently defining their metrics and only 29 percent with mature metrics in place.

* Software-as-a-Service is clearly gaining momentum in Europe with 26 percent of Europeans surveyed already deploying SaaS and a further 29 percent actively considering it.

"The polling data clearly indicates that both in the U.S. and in EMEA, regulatory issues drive the investment in security. It also suggests that European organizations are more aware of the need to rethink how they secure their computing infrastructure in a world that is becoming ever more global and interconnected," said Courtot.

About Jericho Forum

See www.jerichoforum.org

About Qualys

Qualys, Inc. is the leading provider of on demand security risk and compliance management solutions. Qualys is the only security company that delivers these solutions through a single Software-as-a-Service platform. QualysGuard allows organizations to strengthen the security of their networks and conduct automated security audits to ensure compliance with policies and regulations. As a scalable and open platform, QualysGuard enables partners to broaden their managed security offerings and expand their consulting services. Qualys' on demand solutions are deployed in a matter of hours anywhere in the world, providing customers an immediate view of their security and compliance posture. QualysGuard is the widest deployed security on demand solution in the world, performing over 150 million IP audits per year. For more information, please visit www.qualys.com.

For more information or to speak to a Qualys or Jericho spokesperson regarding the survey, please contact Jane Folwell at InfoSecurity Europe on Mobile Tel: [phone] or at [e-mail]

Qualys, the Qualys logo and QualysGuard are proprietary trademarks of Qualys, Inc. All other products or names may be trademarks of their respective companies.