One in five (22 per cent) European businesses expect to have to cope with "major data loss" of some sort annually over the next five years compared to 10 per cent of their US counterparts.

Multiple reports of data losses in the US, publicised because of information security disclosure laws, have given the impression that the problem of confidential customer data leaks due to lost laptops and hacker attacks was much worse in the US than in Europe. But a survey of 500 IT managers by net security firm Symantec shows that fears of IT security breaches are running twice as high among IT pros in the EMEA region as among their US counterparts.

The majority of respondents to the survey expect to be impacted by some type of security, compliance and or IT incident within the next five years.

Two-thirds (66 per cent) of respondents expect a major regulatory incident at least once every five years, with 58 per cent fearful of a major data loss caused by either a data centre outage, corruption of data or breach of security systems over the same five-year time frame.

Symantec's IT Risk Management Report also unearths conflicting perceptions of risk between IT executives and their staff, an issue that could lead to bad decisions about where to commit resources. IT professionals quizzed in the study rated themselves as more effective in deploying technology than applying process controls in managing IT security risk, a emphasis that could see them at loggerheads with their bosses and making decisions that fail to secure overall business goals. ®

Related stories

• Brits happy to hand over password details for £5 gift voucher (26 September 2008)
• Breach disclosure laws have 'no effect' on identity theft (5 June 2008)
• EU agency declares war on botnets (28 May 2008)
• Soaraway security spending keeps breaches in check (22 April 2008)
• Information security breaches quadrupled in 2007 (2 January 2008)
• Unsung software developers behind rise in online fraud (17 September 2007)
• IT bosses: directors don't take security seriously (13 August 2007)
• Lack of database trip-wires gives crooks an easy run (5 June 2007)
• UCSF computer security breach affects 46,000 (maybe) (4 April 2007)
• Symantec buys compliance firm (9 March 2007)
• Digital data will increase sixfold by 2010: study (8 March 2007)
• FSA has power to order data breach disclosure (19 February 2007)
• Small biz cheapskates fail the Tech industry (11 February 2007)
• Hacked to the TK Maxx (19 January 2007)
• Ohio child hospital hack exposes 230,000 files (30 October 2006)
• People - not products - are most important to security (25 October 2006)
• What the heck was on that stolen laptop? (19 August 2006)
• NY enacts security breaches disclosure law (12 August 2005)
• Visa cuts CardSystems over security breach (19 July 2005)