ITAA Survey Finds Cyber Security Awareness Lacking.

Business Editors/High-Tech Writers

ARLINGTON, Va.--(BUSINESS WIRE)--June 17, 2003

The human factor may be the weakest link in the nation's information security defenses, according to the Global Cyber Security Survey, completed this June by The Information Technology Association of America (ITAA) and Brainbench(TM), a global leader in online skills measurement. The study indicates individual computer users overwhelmingly believe that cyber security is someone else's problem, not their own; many people have gained their cyber security skills through informal channels; and a substantial number think that their employers are doing at best only a fair job of giving people the education and training they need to avoid harmful situations. The online survey measured the opinions of almost 800 knowledge professionals around the globe.

Key findings:

-- Most American workers feel their co-workers are the problem.

While survey respondents tend to rate themselves highly, they

tend to give their co-workers low-to-failing grades with

respect to cyber security. Sixty-five percent of respondents

said their co-workers ignored it, didn't want to be bothered

or just didn't know what to do.

-- A significant percentage of workers (46%) have either no

formal training in information security practices or they

learned information security 'here and there.' Only 39 percent

of respondents say they received their training on the job.

-- The survey shows that a significant portion of the

respondents, or 36%, are either not sure what to do about the

cyber security issue, or are not particularly interested in

taking any steps to protect their organizations'

infrastructure.

-- When dealing with cyber security issues, employees often shift

the responsibility elsewhere, with just about half (49%) of

survey respondents saying their company is doing a poor job,

or is providing little, sporadic, incomplete or no security

information at all.

"The security survey results shows the need for effective methods that can help organizations rapidly identify and eliminate the security knowledge gaps," says Brainbench Chief Executive Officer Mike Russiello. "We have responded to these challenges by offering online Computer Adaptive Tests that were designed by Brainbench to cover eight critical security topics and fit any level of cyber defense proficiency."

According to ITAA President Harris Miller, "The survey shows that, when it comes to information security, too often, 'ready, shoot, aim' is the order of the day. Companies need to understand what their employees do not understand when it comes to safe cyber practices. And companies need a better, faster, more cost effective way to figure it out-and fill in the awareness gaps. The Information Security Awareness Certification (I-ACERT) program is designed to help organizations round out their cyber defenses."

To gain I-ACERT certification for an organization, 90 percent of its computer users must take the test, and 85 percent must pass the test with a score of 2.75 or better on a five-point scale. Individual test takers passing the test receive a certificate of achievement. Volume discounts may apply for corporations. The test is also available to individuals interested in professional development. For additional program details, visit the ITAA website at www.itaa.org.

Survey findings are available on the web at www.itaa.org.

About ITAA

The Information Technology Association of America (ITAA) provides global public policy, business networking, and national leadership to promote the continued rapid growth of the IT industry. ITAA consists of over 400 corporate members throughout the U.S., and a global network of 49 countries' IT associations. The Association plays the leading role in issues of IT industry concern including information security, taxes and finance policy, digital intellectual property protection, telecommunications competition, workforce and education, immigration, online privacy and consumer protection, government IT procurement, human resources and e-commerce policy. ITAA members range from the smallest IT start-ups to industry leaders in the Internet, software, IT services, ASP, digital content, systems integration, telecommunications, and enterprise solution fields. For more information visit www.itaa.org or www.itaa.org/infosec. The ITAA I-ACERT Certification program is managed by ITAA Services, Inc.

About Brainbench

With more than 4 million registered users and over 425 different skill tests, Brainbench pioneered online skills testing to measure the skills of employees and consultants that are crucial to a company's bottom-line success. Utilizing the largest ISO 9001 library of tests, companies rely on Brainbench to help them measure, track, and improve their employees' vital professional skills, with online skills measurement solutions that improve retention, training success, customer satisfaction, and profitability. Corporate customers include Wells Fargo, Key Bank, EDS, Dresdner Kleinwort Wasserstein (DrKW), H&R Block, IBM, Interwoven, Manpower, Qwest, TAC Worldwide, U.S. Office of Personnel Management (OPM), NASA, and Verizon. Strategic Investors include Manpower and Thomson Corporation.