UK companies are still failing to recognise the importance of properly implemented and managed security, assuming it is just a 'technology issue' rather than a fundamental part of the way their organisation works.

By passing the buck wholesale to the IT department companies are exposing a number of flaws across their organisation - from the top down - and even a tightening of legislation and increased emphasis on accountability and corporate governance has done little to interest the head-in-the-sand 'higher ups' that they should be getting involved and delegating tasks effectively.

According to independent research conducted by Coleman Parkes on behalf of LogicaCMG, 53 per cent of companies entrust the IT department with the sole enforcement of the information security policy.

By Will Sturgeon at Silicon.

[ Read more ]