Wireless Network the Weakest Security Link in Enterprise IT Infrastructure, According to Fortinet Global Survey of IT Leaders

BANGALORE, June 17, 2015 /PRNewswire/ --

In India 10 in 10 CIOs Report Concerns Over Insufficient Wireless Protection; Over One-third of Enterprises Found Lacking Basic Wireless Security 

Information Technology decision makers (ITDMs) believe wireless networks to be the most vulnerable element of the IT infrastructure (database is the most vulnerable element of the IT infrastructure for Indian respondents), according to a new survey from Fortinet® (NASDAQ: FTNT), the global leader in high-performance cyber security solutions. Nearly half (49% worldwide and 40% in India) of respondents ranked wireless networks as most exposed from a security standpoint, in contrast to just 29% (34% in India) for the core network.

The Fortinet survey also reveals that insufficient wireless security is a concern for almost all (92% and 100% in India) of the CIOs polled; hardly surprising given that more than one-third of the enterprise wireless networks put in place for internal employees (37% worldwide and 34% in India), do not have the basic security function of authentication in place.

The findings come from an independent survey of over 1,490 IT decision makers at 250+ employee organizations around the world including 100 respondents from India. All respondents were sourced from independent market research company Lightspeed GMI's online panel.

Other survey highlights include: 

o Nearly half of ITDMs (48% worldwide versus 55% in India) consider loss of sensitive corporate and/or customer data the biggest risk of operating an unsecured wireless environment.
o 72% (83% in India) have adopted a cloud approach to management of their wireless infrastructure and 88% (95% in India) trust the cloud for future wireless deployment.
o 43% (29% in India) of ITDMs polled provide guest access on their corporate wireless networks; 13% (3% in India) of these organizations do so without any controls whatsoever.

Wireless networks at risk

According to the survey, wireless networks are ranked as the most vulnerable IT infrastructure, with the highest proportion of ITDMs (49% WW vs 40% in India) placing it in their top two. Respondents positioned wireless as significantly more vulnerable than core networking infrastructure, with 29% of ITDMs ranking this highly (34% in India). In India, the most vulnerable IT infrastructure is database according to 43% of Indian respondents (25% worldwide). Applications (17% WW vs 23% in India) and storage (11% WW vs 13% in India) infrastructures were considered amongst the least susceptible from a security standpoint.

In addition, 37% of global ITDMs polled (34% of Indian ITDMs) do not have the most basic wireless security measure of authentication in place. A significant 29% and 39% (29% and 25% in India) of enterprises respectively, overlook firewall and anti-virus security functions when it comes to wireless strategies.

Other security measures deemed critical to core infrastructure protection, such as IPS (deployed by 41% vs 51% in India), application control (37% vs 38% in India) and URL filtering (29% vs 35%), play a part in even fewer wireless deployments.

When considering the future direction of their wireless security strategies, the majority of respondents said they would maintain focus on the most common security features - firewall & authentication, while demand for more security is emerging with 23% (22% in India) prioritizing complementary technologies - IPS, anti-virus, application control and URL filtering - to guard against the full extent of the threat landscape.

Concern high over insufficient wireless security

Of the ITDMs surveyed, 83% (94% of Indian ITDMs surveyed) are concerned their existing wireless security is not sufficient, with CIOs reporting the highest level of concern at 92% (100% in India). Despite deploying the highest level of security of all the regions surveyed, ITDMs across APAC are the most concerned about their wireless security with 44% stating they are very concerned, in contrast to 30% in the Americas, and 20% in EMEA.

Globally, ITDMs reported varying confidence levels in wireless security; China tops the board with 71% 'very concerned followed by India at 61%', compared to just 13% in Japan.

The findings suggest that increased security awareness leads to higher levels of concern, with respondents in the top two 'concerned' countries - China and India - deploying more wireless security functions on average, than the two least 'concerned' countries - Italy and Japan.

Risk of data loss tops poll

When asked to cite the risks of operating an unsecured wireless network, 48% of ITDMs (55% of Indian ITDMs) considered loss of sensitive corporate and/or customer data as the biggest risk to their organization. This was highest at 56% in APAC, in contrast to the Americas at 45% and EMEA 42%.

The next highest risk, industrial espionage, was cited by just 22% of ITDMs, followed by non-compliance to industry regulations (13%), with service interruption and damage to corporate reputation ranked equal last (9%). In India, the next highest risk, industrial espionage, was cited by just 17% of Indian ITDMs, followed by service interruption (10%), non-compliance to industry regulations and damage to corporate reputation ranked equal last (9%).

Cloud management becomes the norm

Wireless infrastructure governed by a premise-based controller is a thing of the past according to the findings, with on-site wireless controllers the least common form of management (28% vs 17% in India).

This trend for cloud-based management looks set to grow further, with only 12% (5% in India) of enterprise ITDMs refusing to trust the cloud for such critical management in the future.

Of the cloud-ready respondents, 58% (53% in India) would want to use a private cloud infrastructure for wireless management and 42% (47% in India) would outsource to a third party managed services provider. 14% (20% in India) of those considering outsourcing would only do so provided it is hosted in the same country, leaving 28% (27% in India) happy to embrace wireless management as a public cloud service regardless of geography.

71% do not provide guest access

Only 29% of India ITDMs polled provide guest access on their corporate wireless networks (compared to 43% of global respondents), with 3% of these organizations doing so without any controls whatsoever (13% worldwide).

The most common form of guest security access on corporate wireless networks is a unique and temporary username and password (46% vs 38% in India), ahead of a captive portal with credentials (36% vs 24% in India).

"The survey findings indicate that despite the growth in mobility strategies, wireless security has simply not been a priority for enterprises to date," said Rajesh Maurya, Country Manager, India & SAARC at Fortinet. "As advanced persistent attacks increasingly target multiple entry points, and the cloud becomes more prevalent, it's not an oversight organizations should risk any longer."

"It's positive to see IT Leaders beginning to recognize the role wireless security plays in protecting their critical business assets, yet there is more to be done. As IT strives to balance the need for strong network security with ubiquitous connectivity, wireless must be considered as part of a holistic security strategy to ensure broad and consistent protection for users and devices over wired and wireless access," adds Maurya.

The Fortinet Wireless Security Survey was a research exercise undertaken throughout May 2015, by market research company Lightspeed GMI. The survey was conducted online amongst 1,490 qualified IT decision makers - predominantly CIOs, CTOs, IT Directors and Heads of IT - at organizations with more than 250 employees around the globe.

12 countries participated in the survey: Australia, Canada, China, France, Germany, India, Italy, Japan, Hong Kong, Spain, UK and USA. For more information about LightSpeed GMI go to: http://www.lightspeedgmi.com

About Fortinet

Fortinet (NASDAQ: FTNT) protects the most valuable assets of some of the largest enterprise, service provider and government organizations across the globe. The company's fast, secure and global cyber security solutions provide broad, high-performance protection against dynamic security threats while simplifying the IT infrastructure. They are strengthened by the industry's highest level of threat research, intelligence and analytics. Unlike pure-play network security providers, Fortinet can solve organizations' most important security challenges, whether in networked, application or mobile environments - be it virtualized/cloud or physical. More than 210,000 customers worldwide, including some of the largest and most complex organizations, trust Fortinet to protect their brands. Learn more at http://www.fortinet.com , the Fortinet Blog or FortiGuard Labs.

Copyright © 2015 Fortinet, Inc. All rights reserved. The symbols ® and ™ denote respectively federally registered trademarks and unregistered trademarks of Fortinet, Inc., its subsidiaries and affiliates. Fortinet's trademarks include, but are not limited to, the following: Fortinet, FortiGate, FortiGuard, FortiManager, FortiMail, FortiClient, FortiCare, FortiCloud, FortiAnalyzer, FortiReporter, FortiOS, FortiASIC, FortiWiFi, FortiSwitch, FortiVoIP, FortiBIOS, FortiLog, FortiResponse, FortiCarrier, FortiScan, FortiAP, FortiDB, FortiVoice and FortiWeb. Other trademarks belong to their respective owners. Fortinet has not independently verified statements or certifications herein attributed to third parties and Fortinet does not independently endorse such statements. Notwithstanding anything to the contrary herein, nothing herein constitutes a warranty, guarantee, binding specification or other binding commitment by Fortinet, and performance and other specification information herein may be unique to certain environments. This news release contains forward-looking statements that involve uncertainties and assumptions, such as statements regarding product releases. Changes of circumstances, product release delays, or other risks as stated in our filings with the Securities and Exchange Commission, located at www.sec.gov, may cause results to differ materially from those expressed or implied in this press release. If the uncertainties materialize or the assumptions prove incorrect, results may differ materially from those expressed or implied by such forward-looking statements and assumptions. All statements other than statements of historical fact are statements that could be deemed forward-looking statements. Fortinet assumes no obligation to update any forward-looking statements, and expressly disclaims any obligation to update these forward-looking statements.

Media Contact:
Gunashekar Srinivasan
[email protected]
+91-9886096221
Director
MediaTalk