Tech Vendors' Lack of Security Transparency Worries Firms

Tech Vendors' Lack of Security Transparency Worries Firms
A majority of firms say they're more likely to buy from suppliers that are open about security issues -- yet that sentiment isn't necessarily reflected in the technology providers they're currently working with.

An increasing number of companies have identified security assurance as a major consideration in their decisions to purchase hardware, software, and services — yet many vendors fall short, according to a report published this week by the Ponemon Institute.


Nearly two-thirds (64%) of those polled in the survey consider it very important for their technology providers to be transparent about vulnerabilities, security updates, and ways to patch security issues. But most vendors fail to offer that transparency, according to 47% of those respondents who said they're not satisfied with the security information provided by vendors. Nearly three-quarters of those surveyed are more likely to purchase technologies and services from companies that prioritize the finding and patching of vulnerabilities and the communications of those security issues, the Intel-sponsored report states.


The survey seems to indicate companies are worried not only about their own security, but that of their suppliers as well, says Larry Ponemon, chairman and founder of the Ponemon Institute.


"There are so many choices, and the complexity of security has [grown] over the years. What use to be simple is now much harder ... this may be a call for help," he says. "Companies that do security very well are looking for something that gives them more confidence that, by investing in a specific technology, they will be getting the security they need."


The report is based on a survey of 1,875 security staff from the US, the UK, EMEA, and Latin America who know their company's technology-purchase policies. The most significant considerations when evaluating security technology is interoperability issues, installation co ..

Support the originator by clicking the read the rest link below.