
So claim the results of the latest annual CSI/FBI Computer Crime and Security Survey. The problem with this study is that it takes into consideration only the reported data breaches and the
conclusion is that in order to keep up appearances, the companies that have suffered such attack have imposed total silence on the matter as a consequence.
"This year's survey -- coupled with results from recent years -- suggests that the news within the enterprise security perimeter is good. Respondents tell us that they are keeping their cybercrime losses lower," stated CSI Director Chris Keating. "At the same time, our economic reliance on computers and technology is growing and criminal threats are growing more sophisticated, so we shouldn't overestimate our strengths."
The study indicates that the average loss reported due to data breaches has dropped an estimated 18% to $167,713 from $203.606 in 2005. 626 computer security providers have been scrutinized for the survey within various areas from the government to scholastic institutions.
The results of the study show that 74% of all financial losses can be traced back to viral attacks, hacking, unauthorized access to information and data theft, with the rest being caused by data breaches. The survey also indicates that institutions and businesses are more willing to report breaches compared to 2005.
"Negative publicity from reporting intrusions to law enforcement is still a major concern for most organizations," CSI said. "Even in an anonymous survey, only half of the 616 U.S companies surveyed were willing to share overall cost figures from financial losses resulting in security breaches."