Survey: industrial firms underestimate their data risk.

• Position: INFORMATION SECURITY

[ILLUSTRATION OMITTED]

Manufacturing and distribution executives have become more aware of the risks associated with business information and data, especially as social media becomes more widespread. Yet more than two-thirds believe their data is at little or no risk, according to a research report from the consulting firm McGladrey. Given that their controls are often insufficient or ineffective, this raises the question of whether the executives fully understand their exposure.

Roughly 70% of small and midsize organizations said their data was at little or no risk, as did 56% of larger companies. Attackers, though, don't seem to care much about size.

"Financially motivated attackers will take any data they can find," wrote Corbin Del Carlo, McGladrey's director and regional leader of security and privacy services. "One company's Internet footprint looks the same as another to anyone interested in finding something of value, whether it's credit information, personnel information, intellectual property such as engineering drawings or processes, technology, or other industrial assets. Size does not matter...