Trend Micro study provides end-user revelations about risky online behaviour at work

SecureData, a member of the JSE-listed ERP.com Group, and the southern African distributor for Trend Micro security software, today announced that results of a study reveal why some end-users in enterprise environments around the world are more likely to engage in riskier online behaviour at work than home.

The findings place added emphasis on the security challenge IT organisations face in protecting business networks, securing critical information, and reducing help-desk calls.

The study, conducted in July 2005, featured more than 1 200 corporate end-users in the US, Germany and Japan who responded to an online survey.

Of the many findings, perhaps the most significant is the correlation between the presence of an IT department and end-user confidence in the security they expect against viruses, worms, spyware, spam, phishing and pharming. These expectations often result in riskier online behaviour that exacerbates the challenge of IT to protect business operations from increasingly unpredictable threats.

Of those who responded, 39% of enterprise end-users believed IT could prevent them from falling victim to threats like spyware and phishing. This belief prompted many of them to admit bolder online behaviour.

Of those who admitted to engaging in bolder online behaviour, 63% acknowledge that they are more comfortable clicking on suspicious links or visiting suspicious Web sites because IT has installed security software on their computers. 40% of those who admitted to engaging in riskier online behaviour said it was because IT was available to provide support if problems occurred. Because of the correlation between the presence of IT, end-user security expectations, and riskier end-user behaviour, the study magnifies the importance for IT to ensure up-to-date security across the business network.

"Although end-users have expectations of IT to educate and protect them, they may not always help in overcoming network security challenges. In reality, they could make it more difficult," commented Max Cheng, executive vice-president and general manager of Trend Micro's enterprise business segment. "Eye-opening revelations like these highlight the security challenges IT departments face within their own organisations and should motivate them to ensure greater protection across their enterprise."

The study suggests that a bolder user base can impact an enterprise organisation's ability to contain costs, particularly associated with its IT help-desk. For example, in Germany, end-users expressed a high degree of confidence in their IT departments, admitting their presence made them feel more inclined to click on suspicious links, open suspicious e-mails, and, if needed, contact the help-desk when problems occurred.

Some 40% of German end-users were inclined to contact IT regarding security issues - whether they were perceived or real. In reality, 38% of German enterprise end-users had contacted their IT departments about security concerns within three months leading up to the survey. For enterprise organisations with hundreds or thousands of employees, the likelihood for 38 out of every 100 end users to engage help-desks about security issues -- in a concentrated amount of time -- impacts the ability of IT to manage its cost structures and protect investments.

"More than just network availability or information integrity is at stake," added Cheng. "Understanding end-user behavioural tendencies and protecting the business can be the difference between ensuring business continuity and losing it."

Noteworthy findings include:

* In the US, 48% of workers who admit they are more likely to open suspicious e-mails or Web links on their work computers than at home said it was because they had IT to support them if something bad happened. Germany (39%) and Japan (28%) featured similar results.
* In Germany (76%) and the US (65%), business end-users who admitted to being more likely to open suspicious e-mails and links said it was because IT had installed security software on their computers. In Japan, 42% felt the same way.
* One out of three (34%) US business end-users and at least one out of every four in Germany (29%) and Japan (28%) who admitted they are more likely to open suspicious e-mails or click on suspicious links said it was because the computer equipment was not theirs.
* At least one out of four end-users in the US (31%) and Japan (27%) contacted their IT help-desks regarding security concerns within three months of responding to the survey. In Germany, 38% of enterprise end-users had contacted IT within the same timeframe because of security concerns.

"Policy enforcement for security products and the ability to control access to the Internet from a central server are key success factors in ensuring corporate desktop security and protecting the bottom line," continued Cheng. "In looking at the big picture, this must all be part of a multi-layered anti-virus and content security solution that spans the entire network environment, from gateways and servers to desktops and mobile devices. Such an infrastructure enables the delivery of timely updates that protect every corner of your network - and therefore your business."