Posted on Wednesday, January 18th, 2006 at 4:55 pm
Small- and medium-sized enterprises (SMEs) are leaving themselves vulnerable to security and compliance risks by not having Internet Acceptable Use Policies (AUPs) that address the latest and most dangerous Internet-based threats, according to St. Bernard Software, Inc., a provider of security solutions. In a survey of IT administrators at 500 companies, four key IT threat areas were found to be missing in written AUPs: spyware, inappropriate surfing, instant messaging and P2P use. The details of the survey data are as follows:
Spyware: 70 percent of organizations have not addressed this in their AUP; 68 percent have no perimeter solution.
Inappropriate surfing: 64 percent have not addressed this in their AUP; 80 percent have no perimeter solution.
Instant messaging: 72 percent have not addressed this in their AUP; 79 percent have no perimeter solution.
P2P: 72 percent have not addressed this in their AUP; 78 percent have no perimeter solution.

