The cyber crisis impacting U.S.-based enterprises is often swept under the IT rug as a technology issue to be delegated to and resolved by information technology experts who have little to no view on the overall organization’s business or risk issues. At the recent RSA Security Conference, session after session and meeting after meeting, researchers, CSOs and consultancies voiced the same issues: It’s a business problem, not a technology problem, because you're not securing IT – you need to secure the business.
While gang members are 70 percent more likely to commit Internet crime, they are not often involved in cyber crimes like phishing or commercial hacking due to a lack of skill.
A study from (ISC)2 found that the global shortage of IT security professionals is driven by a combination of business conditions, executives who don't understand the need for security and an inability to locate enough qualified IT security professionals.
Security software maker Bit9 said that computer hackers have breached its network, then launched a second round of attacks against some of its customers.