
What You Need to Know About the State of Endpoint SecurityBy Ericka Chickowski

The Ponemon Institute recently conducted a study on behalf of Lumension to take the pulse of decision makers from both IT security and IT operations groups about endpoint management and security. Unsurprisingly, Ponemon found among the key findings that endpoint management systems still remain too complex and costly for organizations and IT ops and security still don’t quite see eye-to-eye when it comes to keeping endpoints both safe and reliable. The study surveyed more than 3,000 participants from five countries, with a rough half-and-half ratio between ops and security players.

More than 53% of participants reported that their IT security budget will likely stay the same in 2010.

Among key technologies that affect the manageability and security of endpoints, the one most likely to see increased use in 2010 was cloud computing, with 69% of participants predicting a boost.

Around 68% of those surveyed believed they would increase use of virtualization in 2010.

Another 65% said they would bump up use of Web 2.0 next year.

On average, organizations have 3.7 software agents installed on each endpoint to perform management, security or other operations tasks.

The average number of distinct software management consoles for endpoint operations tallies up to 3.9.

Approximately 40% of respondents reported that employees can connect their own devices to enterprise networks, yet only 26% have a policy that permits those employees to do so.

Only 17% of those surveyed see collaboration between security and operations as excellent.

31% believe collaboration between the two groups is poor or non-existent in their organizations.

The perception of problems in managing endpoints differs between ops and security.

For example, 43% of operations people said that overly complex technology is a top difficulty with endpoint management, while only 18% of security responded similarly.

In the same vein, 41% of security participants listed misalignment of IT with the business as a top difficulty, while only 24% of operations respondents said the same.

One problem that both groups agreed was a big problem: lack of skilled personnel.

Currently only 38% of surveyed organizations have PC lifecycle management solution that includes features such as asset, configuration or patch management.

An additional 41% say they plan on implementing such a tool in the next one to two years.

80% of all respondents wish for antivirus and antimalware in their integrated endpoint management suite.

70% wish for whole disk encryption.

65% want whitelist application control.

68% demand patch and remediation management.

61% wish for IT asset management.