Computer Viruses, Worms Pose Biggest Security Headache for IT Departments, CompTIA Web Poll Finds.

Business Editors

OAKBROOK TERRACE, Ill.--(BUSINESS WIRE)--Jan. 27, 2004

Computer viruses and worms pose the biggest security risk to organizations today, according to information technology (IT) professionals responding to a recent Web poll sponsored by CompTIA, the Computing Technology Industry Association.

Nearly four in ten survey respondents (38.7 percent) said viruses and worms are the biggest security issues facing their organizations today. More than 60,000 types of computer viruses have been defined since the term was first coined in the early 1980s. The effect of a virus may be a simple prank that pops up a message on screen, or it may destroy programs and data. Similarly, worms are destructive programs that replicate throughout disk and memory, using up a computer's resources and eventually putting the system down.

Ranking second on the list of most challenging IT security issues was "social engineering;" 13.6 percent of Web poll respondents identified this threat as the most serious security issue facing their organization. Typically delivered through unsolicited e-mails with misleading subject lines, these viruses and worms are unleashed when an unsuspecting recipient opens the message or attachment.

In fact, a CompTIA study on IT security issues published in 2003 indicated that human error - not technical malfunction - was the most significant cause of IT security breaches in the public and private sectors. (For more information on this study, please visit: http://www.comptia.org/research/files/summaries/SecuritySummary031703 .pdf

(Due to the length of this URL, it may be necessary to copy and paste this hyperlink into your Internet browser's URL address field.)

"IT security professionals are challenged more than ever," said John Venator, president and chief executive officer, CompTIA. "They must focus not just on technology, but on the human element as well. That is why it is absolutely essential for every organization to have both a well designed, well managed and well secured IT infrastructure; and the policies and practices in place that keep their employees alert to and aware of security risks."

Other security issues identified by Web poll respondents as significant security issues included data theft (7.5 percent), authorized user abuse (7 percent), lack of written security policies and guidelines (7 percent), and wireless networking security (7 percent).

In response to the growing need for skilled workers with training in IT security issues, CompTIA offers a vendor-neutral Security+(TM) certification. Since its introduction in December 2002, more than 4,000 professionals in 76 countries have earned CompTIA Security+(TM) certification. In addition, hundreds of educational institutions and training organizations are running classes on CompTIA Security+ certification. To earn this certification, candidates must master an understanding of access control, authentication, external attack, operational and organizational security, and the basics of cryptography.

About CompTIA

CompTIA is a global trade association representing the business interests of the information technology industry. For more than 22 years CompTIA has provided research, networking and partnering opportunities to its more than 19,000 members in 89 countries. The association is involved in developing standards and best practices, and influencing the political, economic and educational arenas that impact IT worldwide. More information is at www.comptia.org.