The survey demonstrates that very few business owners have taken the necessary precaution of having a professional data security firm perform a current assessment of vulnerabilities on their commercial Website or database applications, according to Sloane. “Sixty-five percent of business owners surveyed seem unaffected by natural disasters, and 61 percent seem to think their data is backed up in multiple locations,” he said. “We believe that small to medium-sized business owners need to review all aspects of their data security and disaster recovery efforts.” 

Despite the high number of small businesses that may be underprepared for a security disaster, a recent survey by PwC found 43 percent of global companies think they have an effective information security strategy in place and are proactively executing their plans. Twenty-seven percent of respondents identified themselves as “strategists,” while the remaining identified themselves as “tacticians” and “firefighters” (15 and 14 percent, respectively).

Seventy-two percent of the more than 9,600 security executives from 138 countries who took part in the ninth annual survey report confidence in the effectiveness of their organization’s information security activities—however, confidence has declined markedly since 2006. The findings of the survey have helped carve a new definition of an information security leader.

Even though 43 percent see themselves as “front-runners,” according to the survey only 13 percent made the “leader” cut. Those identified as leaders have an overall information security strategy in place, a CIO or executive equivalent who reports to the “top of the house,” measured and reviewed security policy effectiveness, and an understanding of the security breaches facing the organization in the past year.