
According to a new study by CompTIA, a nonprofit industry association and training organization, the volume and severity of security incidents impacting businesses continues to increase. No surprise there, but the CompTIA study found that many of the security events result from human error and lack of security awareness training. Here’s where solution providers can provide the most security help.

Security breaches and incidences continue to costs businesses big. The average total cost of security breaches for 2008 was $85,000.

Spyware, malware and inept users conspired against businesses in 2008, topping the list of security headaches. These issues have consistently topped the threats list for the past three years.

Businesses are most concerned about the human element; employees not following policies or making poor choices, falling for social engineering and phishing attacks, and internal data theft.

Threats continue to evolve and businesses are feeling the pain. Voice and mobility solutions saw the greatest increase in threat levels in the last 12 months, eroding the confidence in the borderless workplace.

Firewalls and antivirus continue to make up the bulk of security tech spending, but more businesses are investing in emerging and advance technologies, such as physical access control and multifactor authentication.

More businesses now have a disaster recovery plan, but most lack basic planning and policy procedures, such as incident response and change control management. Processes can help eliminate many common security errors.

Security breaches are more than an annoyance. End users say breaches cost them in productivity and revenue costs.

Businesses are devoting the bulk of the security budgets to new technologies and maintenance. Getting short-shrift is training and program development; short-comings at the root cause of many security breaches.

New technologies and products lead security spending plans, but businesses are recognizing the need for better planning and management of their security operations.

Businesses that are conducting security certification and awareness training are hitting all of the hot button topics.

Serious topics that often get passed over in security training include social engineering, instant messaging and identity theft-three of the most common security problems today.

Channel Insider Secure Channelhttp://blogs.channelinsider.com/secure_channel/Channel Insider Security/c/s/Security/CompTIAwww.comptia.orgSANS Institutehttp://www.sans.org/