The results of the ISACA IT Risk/Reward Barometer reveal security concerns as use of this technology grows
Mexico City, Mexico (12 November 2014)—In a world where the use of connected devices, such as smart phones, smart watches and smart glasses, is growing and entering the workplace, a new global study by ISACA shows many companies in Latin America are not prepared for this new trend.
ISACA’s IT Risk/Reward Barometer survey examines attitudes and behaviors related to the risks and rewards of key technology trends, including the Internet of Things, Big Data and BYOD (Bring Your Own Device). The 2014 Barometer consists of two components: a survey of 1,646 ISACA members who are IT and business professionals around the world, including 102 in Latin America, and a survey of more than 4,000 consumers in four countries.
According to this year’s Barometer, only 17% of organizations in Latin America have plans in place to leverage the Internet of Things—and fewer than one in five organizations (19%) plan to create plans in the next 12 months.
Respondents report that the greatest challenge related to the Internet of Things is the increase in security threats (42%). More than one-third of respondents believe the risks of the Internet of Things outweigh the benefits for enterprises.
When it comes to wearable technology, including devices such as smart watches and smart glasses, 29% of Latin American companies believe the growing use of such devices in the workplace will have a negative impact on their organizations. This is likely because enterprises are not prepared for them. Nearly 60% say their company’s “bring your own device” (BYOD) policy does not address BYOW (bring your own wearables) and another 29% say their organization doesn’t even have a BYOD policy.
“The Internet of Things, including the growing use of wearable tech, can deliver tremendous opportunities—but it can also pose significant risks if enterprises aren’t ready and if consumers aren’t informed,” said Alex Zapata Lenis, international vice president of ISACA. “Companies should take an ‘embrace and educate’ approach to these devices by creating clear policies and educating employees on appropriate use.”
For a full survey report, including related infographics, video and global results, visit www.isaca.org/risk-reward-barometer.
ISACA recently established the Cybersecurity Nexus (CSX) as a resource enterprises and security professionals can turn to for security advice. Additional information is at www.isaca.org/cyber.
About the 2014 IT Risk/Reward Barometer
The annual IT Risk/Reward Barometer is a global indicator of trust in information. Conducted by ISACA, a global association of more than 115,000 IT security, assurance, risk and governance professionals, the Barometer polls thousands of business and IT professionals and consumers worldwide to uncover attitudes and behaviors about essential technologies and information, and the trade-offs people make to balance risk and reward. The study is based on September 2014 online polling of 1,646 ISACA members from 110 countries. Additional online surveys were fielded by M/A/R/C Research among 1,209 consumers in the US, 1,001 consumers in the UK, 1,007 consumers in India and 1,007 consumers in Australia. The US survey ran 8-11 September 2014, and the UK, India and Australia surveys ran 8-17 September 2014. At a 95 percent confidence level, the margin of error for each individual country sample is: US: +/- 2.8 percent and UK/India/Australia: +/- 3.1%. To see the full results, visit www.isaca.org/risk-reward-barometer.
With more than 115,000 constituents in 180 countries, ISACA (www.isaca.org) helps business and IT leaders build trust in, and value from, information and information systems. Established in 1969, ISACA is the trusted source of knowledge, standards, networking, and career development for information systems audit, assurance, security, risk, privacy and governance professionals. ISACA offers the Cybersecurity Nexus, a comprehensive set of resources for cybersecurity professionals, and COBIT, a business framework that helps enterprises govern and manage their information and technology. ISACA also advances and validates business-critical skills and knowledge through the globally respected Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified in the Governance of Enterprise IT (CGEIT) and Certified in Risk and Information Systems Control (CRISC) credentials. The association has more than 200 chapters worldwide.
Participate in the ISACA Knowledge Center: www.isaca.org/knowledge-center
Follow ISACA on Twitter: https://twitter.com/ISACANews
Join ISACA on LinkedIn: ISACA (Official), http://linkd.in/ISACAOfficial
Like ISACA on Facebook: www.facebook.com/ISACAHQ
Kristen Kessinger, +1.847.660.5512, [email protected]