Severity Level of Information Security Breaches on the Rise, CompTIA Survey Shows.

OAKBROOK TERRACE, Ill. -- The severity level of information security breaches experienced by organizations has show a marked increase over the past year, according to research commissioned by the Computing Technology Industry Association (CompTIA).

Among organizations that reported a security breach in the past 12 months, the average severity level of the breach stood at 4.8 on a 0-10 scale, where 0 is not at all severe and 10 is very severe. The corresponding severity level rating for the past two years was at 2.3 and 2.6.

"This suggests that while the number of security breaches has stabilized, the breaches that are occurring are having a greater impact than ever on organizations," said Brian McCarthy, chief operating officer, CompTIA.

No significant differences are evident in the severity of breaches by company size; however, smaller organizations reported slightly less severe breaches than larger organizations.

The survey found that the average cost of a security breach across all companies was $369,388, driven by a handful of companies who estimated costs in excess of $10 million, reflecting the higher risk that larger companies face. About one-half of all respondents estimated that the cost of security breaches in the last 12 months was $10,000 or less.

Organizations broke down their costs of security breaches as follows:

* Employee productivity impacted - 35 percent

* Server or network downtime - 21 percent

* Revenue-generating activities impacted - 20 percent

* Physical assets impacted - 17 percent

* Legal fees and/or fines - 8 percent

The survey also revealed that not all security breaches originate externally. Among organizations that experienced a security breach, nearly one in four (23 percent) indicated that they had an insider security breach or threat in the last year.

CompTIA commissioned TNS, a global market insight and information group, to conduct the study to identify current IT security practices and highlight security challenges confronted by organizations of varying sizes and sectors.

For more information on the study please visit: http://www.comptia.org/sections/research.aspx.

About CompTIA

In 2007, CompTIA is celebrating its 25th anniversary. Just as the information technology (IT) industry it serves has grown, CompTIA has also enjoyed remarkable growth over the past 25 years. The organization was founded by representatives of five micro-computer dealerships working together to find better ways to do business. Today, CompTIA has more than 22,000 member companies in over 100 countries around the world; and serves as the voice of the world's $1 trillion-plus IT industry. CompTIA is committed to advancing the long-term success and growth of the IT industry by helping organizations maximize the benefits they receive from their investments in technology; and by helping individuals to obtain the skills and credentials they need for productive careers in IT. For more information, please visit: www.comptia.org.

About TNS

TNS is a global market insight and information group. Our strategic goal is to be recognised as the global leader in delivering value-added information and insights that help our clients to make more effective decisions. As industry thought leaders, our people deliver innovative thinking and excellent service to global organisations and local clients worldwide. We work in partnership with our clients, meeting their needs for high-quality information, analysis and foresight across our network of over 70 countries. We are the world's foremost provider of custom research and analysis, combining in-depth industry sector understanding with world-class expertise in the areas of Retail and Shopper Insights, Stakeholder Management, New Product Development, and Brand and Communications. We are a major supplier of consumer panel, media intelligence and internet, TV and radio audience measurement services. TNS is the sixth sense of business. www.tnsglobal.com