Compliance With Data Security Policies

The Ponemon Institute's 2009 survey on insider compliance with data security policies reveals significant gaps in employee adherence to such policies. Findings indicate that a majority of employees engage in risky behavior, such as using insecure USB drives and web-based email, while also expressing dissatisfaction with their organizations' training and effectiveness of security policies. Overall, employee attitudes towards their organizations correlate with compliance levels, as more favorable perceptions lead to lower instances of non-compliance.