《2010 shopping on the job survey2010工作中购物的调查》由会员分享，可在线阅读，更多相关《2010 shopping on the job survey2010工作中购物的调查（14页珍藏版）》请在金锄头文库上搜索。
1、Third Annual Shopping on the Job: ISACAs Online Holiday Shopping and Workplace Internet Safety Survey,Commissioned by ISACA (www.isaca.org) November 2010, 2010 ISACA All Rights Reserved.,Two Surveys in One,Two separate but related surveys make up the Shopping on the Job: ISACAs Online Holiday Shoppi
2、ng and Workplace Internet Safety Survey. One survey was conducted with US consumers/employees. A second survey was conducted with business and IT professionals who are members of ISACA, a nonprofit global membership association, in all geographic regions. Full details are available at www.isaca.org/
3、online-shopping-risks.,Two Surveys in One,Part OneConsumers/Employees: Determine online behaviors of US residents who use a work-supplied computer, laptop, netbook, notebook, tablet and/or smart phone to shop online, especially during the 2010 holiday season. Learn about: Extent of online shopping M
4、otivation for online shopping Approach to security Knowledge of and adherence to corporate IT policies, 2010 ISACA . All Rights Reserved.,Two Surveys in One,Part TwoBusiness/IT Professionals Who Are Members of ISACA: Determine attitudes and experiences of global IT and business professionals regardi
5、ng their policies and expectations of employees doing online shopping on work devices. Survey results from 3,307 business and IT professionals who are members of ISACA in five geographic regions around the world. Results are available in the global aggregate or broken down by region at www.isaca.org
6、/online-shopping-risks.,Key Takeaways,Consumer/Employee Survey: Employees will shop less, but take bigger risks online during the 2010 holiday season. Approximately half as many as last year (23 percent vs. 52 percent) plan to use a work-supplied device to shop online. They plan to spend an average
7、of six hours shopping online (vs. 14 hours in 2009) using a work-supplied device. BUT, more people are doing activities that could put their employer at risk, e.g., clicking on links in e-mails (52 percent in 2010; 40 percent in 2009), providing work e-mail addresses to online shopping outlets (28 p
8、ercent in 2010; 21 percent in 2009) and clicking on a link at social networking sites (19 percent in 2010; 15 percent in 2009). (continued on next slide),Key Takeaways,Consumer/Employee Survey (continued): Cost to the employer is estimated at US $1,000 or more per employee, with many IT professional
9、s putting the number as high as US $15,000. Increase in the number of people who assume that the IT department is ensuring that their work-supplied computer or smart phone has the most recent security patches (41 percent in 2010; 30 percent in 2009) Increase in the number of people not concerned tha
10、t online shopping at work may affect their organizations IT network (24 percent in 2010;17 percent in 2009). The increasing use of mobile devices is making “shopping on the job” riskier. Almost half of those who will be shopping online with a company device will use a laptop, tablet, smart phone or
11、similar device.,Key Takeaways,Business/IT Professional (ISACA Member) Survey: The IT mindset is shifting from prohibiting online shopping to setting limits. The number of organizations prohibiting employees from shopping online using a work computer has dropped to 11 percent. Instead, IT staffs are
12、allowing use but setting limits: 49 percent limit online shopping using a work computer. Similarly, the number of organizations prohibiting employees from accessing social networking sites has dropped to 11 percent. 53 percent of respondents believe their organization loses US $1,000 or more per emp
13、loyee as a result of an employee shopping online during work hours in November and December. Almost one-fifth put the number at US $15,000 or higher. For mobile devices, an overwhelming majority (84 percent) ranked the risk of using a mobile shopping application on a work-supplied device as high or
14、moderate. Despite that, 42 percent allow employees to use work-supplied mobile devices for personal use and 41 percent use their own mobile devices for work.,Key Takeaways,Why are more employees taking risky actions online? Organizations are doing a better job of educating employees about computer s
15、ecurity, but that may be creating complacency, causing employees to assume that IT can handle all security breaches. ISACAs survey found that 25 percent of people are not concerned that their online shopping behavior may affect their organizations IT network. This shows that educating employees abou
16、t security needs to be ongoing and that it needs to gain the employees personal buy-in.,Key Takeaways,Online Shopping Risks: Social engineering and phishing attacks, malware and information breaches that can cost companies thousands per employee to correct, millions in compromised corporate data and severe damage to their reputation Mobile Device Usage Risks: The same social engineering and phishing attacks, plus “mobile malware” and data breaches due to lost or stolen devices,Ke
