Irish firms not prioritising privacy

22-01-2008

by Stephen Errity

Data privacy is not a primary concern for many Irish businesses, according to the latest Ernst & Young Global Information Security Survey.

The study, which is now in its tenth year, found that Irish companies are less concerned about data privacy than their international counterparts, 57 percent of whom ranked 'privacy and data protection' among the top three drivers of information security. In contrast, only 25 percent of Irish firms quizzed felt it was among their top three priorities in this area.

Pat Moran, a partner in Ernst & Young's Risk Advisory Services practice, characterised the Irish results as 'worrying', commenting: "This could be an indication that data is not being appropriately secured and that Irish organisations are at risk from a data leak similar to those incidents in the UK that have been widely reported recently."

Irish companies also ranked lower than others when it came to being proactive in managing privacy and data protection. Only 44 percent of them said their approach in this area was proactive, as against 76 percent of global respondents. But while they may fall down on the specifics, a majority of Irish companies are at least aware of the importance of information security when it comes to ensuring customer confidence: 88 percent agreed with this concept.

Moran added: "In the future, addressing data privacy concerns will be a key part of meeting customer demands... there is an opportunity for organisations to stand out in the marketplace by demonstrating a strong commitment to the privacy and protection of customer data."

Other trends identified by the study include the fact that information security is now becoming more integrated into organisations' overall risk management strategies, but it remains isolated from executive management and strategic decision-making processes. There has also been a shift in attitudes towards the effect of information security on IT and operational efficiency; a majority now consider it an aid, not a hindrance to efficiency in these areas.

The survey pointed to the sourcing of experienced and trained staff as the biggest challenge facing those charged with delivering information security projects. All respondents to the survey said they had to outsource at least some elements of their information security needs for this reason.