Forsythe Survey Finds a Quarter of IT Professionals Admit Their Security May Have Been Breached, Undetected, in the Last Year.

SKOKIE, Ill. -- Survey findings released today by Forsythe Solutions Group reveal that many organizations are struggling to ensure secure IT environments. The survey of more than 100 senior IT and data security professionals at FORTUNE 1,000 and other major companies across the United States found that twenty-eight percent had little or no confidence that they had detected all significant security breaches in the past year. In addition, twenty-six percent rated their current IT environment as more vulnerable than it had been a year before.

Respondents cited regulatory pressure as the major catalyst for updating their technology, processes and staff. Legislative guidelines and industry standards demand increased control of and additional funding for security programs. Those experiencing increased vulnerability overwhelmingly attributed this to organizational change, such as mergers or acquisitions, the implementation of new applications or outsourcing.

"The findings of this study are indicative of the security challenges all organizations face today," says Pamela Fredericks, manager of security advisory services for Forsythe Solutions Group. "Although technology plays an irreplaceable role in securing and ensuring privacy for data, the three P's - policy, process and procedure - have now taken center stage. Not only do they ensure that regulatory compliance requirements can be demonstrated to auditors and regulators, but also that the technology solutions being implemented are supported by solid background processes."

In fact, when asked to identify the security program area that will consume the most time and/or effort in the coming year, forty-three percent cited "policy, process and procedure" as the top priority. This response illustrates the influence regulatory compliance is having on security spending.

"Regulations like Sarbanes-Oxley, HIPAA(1) and GLBA(2) have stimulated the demand for better security 'policies, processes and procedures,'" continues Fredericks. "I am certain that, had we asked these questions a few years ago, the three P's would have been a low or nonexistent priority."

(1) Health Insurance Portability and Accountability Act (HIPAA)

(2) Gramm Leach Bliley Act (GLBA)

About Forsythe

Since 1971, Forsythe Technology, Inc. has served as a technology infrastructure solutions provider, helping organizations across all industries, including Fortune 1000 companies, manage the cost and risk of their information technology. Acting as a trusted, independent advisor, Forsythe provides technology and business consulting services, technology leasing services, and value-added reseller services for all of the leading technology product manufacturers. Headquartered in Skokie, Ill., the company employs more than 600 people in 36 offices throughout the United States. In 2004, Forsythe achieved its 34th consecutive year of profitability with revenues of $449.3 million. Forsythe Solutions Group Inc. and Forsythe McArthur Associates Inc. are wholly owned subsidiaries of Forsythe Technology Inc. For more information, visit www.forsythe.com.