Global State of Security: It’s Making My Head Hurt

OK, so if you’re the kind of person who reads this stuff, CIO magazine just published their Global State of Security Survey findings. The article is pretty interesting, but I have to say that the way that overall the reports make my head hurt.

Now, don’t get me wrong. I’m glad that they’re publishing this information (somebody has to do it). I’m not even going to complain about the questions that they asked or how they asked them (I might have phrased them differently, but then again nobody asked for my opinion).

But I can’t help but get fired up when I start looking for example at the conclusions PWC draws from the data. I won’t go into all of them, or I’d be writing this for the rest of the day. But let me give you an example so you can see what I mean. For example, PWC draws the conclusion:

“Compliance is still a priority, of course. Yet few companies have a well-rounded view of their compliance activities.”

From this data:

Although confidence that users are complying with internal security policies still runs optimistically high at 73%, most companies aren