Security check

97% of U.S. financial services respondents reported they were somewhat or more vulnerable to insider threats, compared with 93% of U.S. retail respondents. However, 51% of U.S. retail organizations identified themselves as very or extremely vulnerable.

41% of U.S. financial services respondents have experienced a data breach or failed a compliance audit in the last 12 months, compared with 48% of U.S. retail respondents.

63% of U.S. financial services respondents cited “privileged users” as the most dangerous insider threat, followed by partners with internal access (43%) and contractors/service providers (40%). Similarly, 59% of U.S. retail respondents cite privileged users as the biggest threat, followed by partners with internal access (51%) and contractors/service providers (45%).

27% of U.S. financial service respondents are protecting data because of a past data breach, compared with 20% of U.S. retail respondents.

U.S. financial service respondents are most concerned about data on mobile devices (47%), databases (42%) and cloud (42%). However, the greatest volumes of data-at-risk are in databases (49%), on file servers (39%) or in cloud environments (36%).

U.S. retail respondents report that cloud (51%), big data (37%) and databases (37%) are at the greatest risk for data loss. The greatest volumes of sensitive data are in the cloud (49%), databases (42%) and big data (34%).

U.S. financial services and U.S. retailer respondents rate analysis and correlation tools (75%, 78%), data-at-rest defenses (82%, 84%), data-in-motion defenses (84%, 81%), endpoint and mobile defenses (76%, 78%), and network defenses (81%, 87%), respectively, as very or extremely effective as a defense.

U.S. financial services and U.S. retailer respondents also plan to increase spending for analysis and correlation tools (47%, 56%), data-at-rest defenses (41%, 56%), data-in-motion defenses (49%, 56%), endpoint and mobile defenses (56%, 55%), and network defenses (62%, 54%), respectively.

57% of U.S. financial service respondents cited preventing a data breach incident as their top spending priority, followed by protection of finances and other assets (43%), and fulfilling compliance requirements and passing audits (39%).

63% of U.S. retail respondents cited preventing a data breach incident, followed by protection of critical IP (37%), and protection of finance and other assets (36%). Interestingly, 77% of retail organizations rated compliance requirements as “very” or “extremely” effective at offsetting insider threats, but did not rank meeting compliance requirements as a top spending priority.