IT Security
New information and communication technologies (ICT) do more and more affect operating procedures and business processes in German companies. The data exchange between internally and externally networked PCs, in particular the Internet usage, is meanwhile an essential part of everyday business. No matter whether the Internet usage is limited to the exchange of e-mails, or whether e-commerce and e-business is carried on by the companies on a large scale, security and reliability of the ICT used must be guaranteed for internal communication and for online contact to business partners alike.
Yet, company surveys show that company data and electronic business processes are in many companies insufficiently secured. Compared to the multitude of external and internal risks there are often only few defensive strategies. Decision makers and employees in companies are in many cases not enough aware of the possible dangers to IT security. Narrow IT budgets or the lack of qualified IT personnel are also major obstacles to effective IT security. Many statistics point out the economic damage potential of insufficient IT protection.
The first FAZIT company survey in spring 2005 examined the mode, the extend and the obstacles of the usage of IT security measures in Baden-Württemberg’s IT and media companies and selected application industries. The results of the survey show that almost all companies take measures in respect of IT security. Antivirus software and firewalls are the main protection against loss of data and undesired access. However, the results of the survey also show that security awareness is less existent in application industries as in the IT and media sector. Moreover, in large companies a broader range of IT security measures is used than in small companies.
You will find a summary of the most important results of the first FAZIT company survey in the FAZIT report 01/2005 (FAZIT-Kurzbericht, in German).
A more detailed documentation of the survey results is published in volume 1 of the FAZIT series "Open Source Software and IT Security" (FAZIT-Schriftenreihe, in German). Apart from the main topic open source software, the topic IT security is considered from various sides. After a short introduction to the history of IT security, the basic requirements of secure data, like for example integrity and confidentially, are explained. Furthermore, the dangers threatening these basic requirements and the defensive measures available are presented.
Interesting links on the topic:
http://www.mittelstand-sicher-im-internet.de (German)
http://www.mcert.de (German)

