Responders report that security is an important
criteria when considering what network system to buy. An attack
through “physical intrusion” is high on the list
of concerns among the responders, although most businesses appear
to be prepared to deal with any breach of security should it
arise. Other concerns include attack by Spam/Spit or DoS attacks.
Most responders feel that it is the responsibility of network
operators to be up to date with security and supply solutions.
Here are the responses to each of the network security questions:
Question One
Happily 81% of responders’ networks have never been compromised
by a security failure in the 12 months up to the middle of September
this year. Five networks have suffered one or two security failures.
Sadly, one business’s network had been compromised more
than 3 times.
| In the last 12 months how
often has your network been compromised by security failure? |
| Answer Options |
Response % |
Response Count |
| Never |
81.25% |
26 |
| Once |
9.38% |
3 |
| Twice |
6.25% |
2 |
| Three Times |
0.00% |
0 |
| more than three times |
3.12% |
1 |
| |
Answered |
32 |
| |
Skipped |
1 |
Question Two
When asked about the commercial impact on their business of security breaches
75% of the responders reported no security breaches. Of those that had suffered
a breach of security, there was minimal, or no commercial impact.
| On a scale of 1-5 what has
been the commercial impact on your business by security breaches? |
| Answer Options |
Response % |
Response Count |
| there have been no security breaches |
75.00% |
24 |
| no commercial impact |
12.50% |
4 |
| minimal commercial impact |
12.50% |
4 |
| serious commercial impact |
0.00% |
0 |
| critical commercial impact |
0.00% |
0 |
| |
Answered |
32 |
| |
Skipped |
1 |
Question Three When it comes to the criteria that people use to make their
buying decisions 37% of responders cited “security” as “most
important” with total of 59.2% of responders selecting
scores of 4 or 5.
“Cost/price” seems to be reasonably important, although
not overwhelmingly, with 50% selecting scores of 4 or 5. 34.5%
of responders see “speed to market” as being “least
important”. “Flexibility” appears to be less
important to responders (a combined score of 31% for scores 4
or 5 (most important)) compared with “Quality of service” where
40% of responders selected scores 4 or 5 (most important).
One responder also said that “Committed Service Level
Agreements” are important criteria in the buying decision
process.
| Please rank in order of importance
(where 1 is the least important and 5 is the most important)
each of the following criteria that your customers use to
make their buying decisions. |
| Answer Options |
1. |
2. |
3. |
4. |
5. |
Response Count |
| A. cost/price |
2 |
3 |
8 |
5 |
8 |
26 |
| B. security |
2 |
3 |
6 |
6 |
10 |
27 |
| C. QoS |
6 |
7 |
5 |
10 |
2 |
30 |
| D. flexibility |
5 |
10 |
5 |
5 |
4 |
29 |
| E. speed to market |
10 |
5 |
6 |
5 |
3 |
29 |
| Other (please specify) |
1 |
| |
|
answered questions |
31 |
| |
|
skipped questions |
2 |
“Security” becomes even more important for
those businesses where there have been no security breaches with
50% rating “security” as “most important” and
68.8% of responders selecting scores of 4 or 5.
| Please rank in order of importance
(where 1 is the least important and 5 is the most important)
each of the following criteria that your customers use to
make their buying decisions. Responses from people declaring
there have been no security breaches in the previous 12 months. |
| Answer Options |
1. |
2. |
3. |
4. |
5. |
Response Count |
| A. cost/price |
0 |
2 |
6 |
4 |
4 |
16 |
| B. security |
0 |
2 |
3 |
3 |
8 |
16 |
| C. QoS |
5 |
4 |
3 |
5 |
1 |
18 |
| D. flexibility |
3 |
8 |
2 |
2 |
2 |
17 |
| E. speed to market |
8 |
1 |
4 |
4 |
1 |
18 |
| Other (please specify) |
1 |
| |
|
answered questions |
18 |
| |
|
skipped questions |
1 |
Question Four
Reaction to whether migration to IP centric networks has affected
network security appears to be mixed with 50% of responders
saying “security is neither better nor worse”.
However, almost 11% of responders say that “security
is significantly better” and only 4% say “security
is significantly worse”.
| On a scale of 1-5 how has
the migration to IP centric networks affected network security? |
| Answer Options |
Response % |
Response Count |
| 1. security is significantly better |
10.71% |
3 |
| 2. security is marginally better |
21.43% |
6 |
| 3. security is neither better nor worse |
50.00% |
14 |
| 4. security is marginally worse |
14.29% |
4 |
| 5. security is significantly worse |
3.57% |
1 |
| |
Answered |
28 |
| |
Skipped |
5 |
Question Five
Concerns about current or future threats to responders’ networks
exist with 46% of responders feeling “quite worried” and
15% feeling “very worried”. No responders reported
to be “extremely worried”.
| On a scale of 1-5 how has
the migration to IP centric networks affected network security? |
| Answer Options |
Response % |
Response Count |
| 1. not at all worried |
0.00% |
0 |
| 2. slightly worried |
38.46% |
10 |
| 3. quite worried |
46.15% |
12 |
| 4. very worried |
15.38% |
4 |
| 5. extremely worried |
0.00% |
0 |
| |
Answered |
26 |
| |
Skipped |
7 |
The proportion of responders who feel “quite worried” increases
to nearly 53% of those businesses that have not had a security
breach in the last 12 months.
| On a scale of 1-5 how worried
are you about current or future threats to your networks?
Responses from people declaring there have been no security
breaches in the previous 12 months. |
| Answer Options |
Response % |
Response Count |
| 1. not at all worried |
0.00% |
0 |
| 2. slightly worried |
36.84% |
7 |
| 3. quite worried |
52.63% |
10 |
| 4. very worried |
10.53% |
2 |
| 5. extremely worried |
0.00% |
0 |
| |
Answered |
19 |
| |
Skipped |
0 |
Question Six
Overall “physical intrusion” is cited by responders
as the most concerning type of attack with 61.5% of responses. “Spam/Spit” and “DoS
attacks” rank equally with 50% of responders choosing these
types of attack. Attacks by “Skype” are seen as the
least concerning with just two responders selecting this type.
No “other” types of attack were reported as being
of concern.
| In the last 12 months how
often has your network been compromised by security failure? |
| Answer Options |
Response % |
Response Count |
| 1. not at all worried |
50.00% |
13 |
| 2. slightly worried |
50.00% |
13 |
| 3. quite worried |
23.08% |
6 |
| 4. very worried |
7.69% |
2 |
| 5. extremely worried |
61.54% |
16 |
| Other (please specify) |
0 |
| |
Answered |
26 |
| |
Skipped |
7 |
Question Seven
50% of responders say that their network is “very prepared” to
deal with a current or future threat. 11.5% of responders confidently
say that their network is “extremely prepared”.
| Which types of attacks concern you the
most? (Select all that apply) |
| Answer Options |
Response % |
Response Count |
| 1. not at all prepared |
0.00% |
0 |
| 2. poorly prepared |
11.54% |
3 |
| 3. reasonably prepared |
26.92% |
7 |
| 4. very prepared |
50.00% |
13 |
| 5. extremely prepared |
11.54% |
3 |
| |
Answered |
26 |
| |
Skipped |
7 |
Of the responders that have not had a security breach 63% say
their network is “very prepared” to deal with a current
or future threat.
| On a scale of 1 - 5 how prepared
is your network to deal with current or future threats? Responses
from people declaring there have been no security breaches
in the previous 12 months. |
| Answer Options |
Response % |
Response Count |
| 1. not at all prepared |
0.00% |
0 |
| 2. poorly prepared |
5.26% |
1 |
| 3. reasonably prepared |
21.05% |
4 |
| 4. very prepared |
63.16% |
12 |
| 5. extremely prepared |
10.53% |
2 |
| |
Answered |
19 |
| |
Skipped |
0 |
Question Eight
Responders are quite clear that “the network operators” have
responsibility to keep ahead of network security and supply solutions.
| Who's responsibility is it
to keep ahead of network security and supply the industry
solutions? |
| Answer Options |
Response % |
Response Count |
| A. the network operators |
65.22% |
15 |
| B. software engineers |
21.74% |
5 |
| C. equipment manufacturers |
13.04% |
3 |
| Other (please specify) |
3 |
| |
Answered |
23 |
| |
Skipped |
10 |
One responder suggested that there is a shared responsibility between
the network operators, the software engineers and the equipment
manufacturers. Other responders suggested that there is a responsibility
on the “Users” as well as the “Director of Security” (or
equivalent) to keep ahead of network security.
Question Nine
42% of responders agree that most collocation of interconnection
facilities have enough security integrity although a further
35% are “not sure” there is enough.
| Do most collocation of interconnection
facilities have enough security integrity to minimise the
risk of physical intrusion? |
| Answer Options |
Response % |
Response Count |
| Yes |
42.31% |
11 |
| No |
23.08% |
6 |
| Not Sure |
34.62% |
9 |
| |
Answered |
26 |
| |
Skipped |
7 |
Question Ten
In the selection of collocation or interconnection facilities
the “physical security layer” is rated as “very
important” or “critically important” by 73%
of the responders.
| On a scale of 1-5 how important
to you is the physical security layer in the selection of
collocation/interconnection facilities? |
| Answer Options |
Response % |
Response Count |
| 1. not at all important |
0.00% |
0 |
| 2. slightly important |
0.00% |
0 |
| 3. quite important |
26.92% |
7 |
| 4. very important |
42.31%
|
11 |
| 5. critically important |
30.77% |
8 |
| |
Answered |
26 |
| |
Skipped |
7 |
|