An Endpoint Protection Best Practices survey from Symantec, which was conducted last October by Applied Research, shows that organizations following best practices for protecting endpoints are doing a better job protecting critical assets and information. However, when those protections fail, it’s still a costly situation. In short, Symantec is proving that nothing is truly secure.
Of the assets attacked, laptops/notebooks were hit 26% of the time, followed by desktops (25%) and physical servers (22%). After that, their virtual counterparts suffered less. Mobile devices, including smartphones and tablets, were targeted 22% of the time. Going further, those numbers translate some sort of downtime. There were 122 instances of downtime were triggered by a mobile device, 89 instances due to a desktop or laptop, 48 due to a server, and 30 instances of widespread downtime. Mobile devices and physical desktops or laptops suffered a combined 511 hours of downtime as a result of being targeted.
When it comes to protecting their assets, the respondents use various layers. These layers include DLP, IPS/IDS, anti-Malware, and Firewalls. In each case, virtual and physical assets were protected. On top of that, 99% of the organizations that took part in the research said that these protections were merged with awareness training for staff.
“The policies and practices of the top performers contrast sharply with our findings among those organizations who ranked in the bottom tier of results and who experience more successful cyber attacks and heavier losses. These poor performers have not deployed the technologies necessary to thwart today’s sophisticated threats, and do not adequately train employees on security best practices,” Symantec’s findings state.
The layered protections also include patch maintenance and management. Overall, the physical layer (servers, desktops, laptops) achieved a reported level of 90% when it came to anti-Malware protection, 93-94% for Firewall coverage, 91-92% for IDS/IPS coverage, and 83-87% for DLP coverage. Mobile devices remained in the mid-low 70% in the same areas, while virtual protections moved about some, hitting the mid-upper 80% to the low 90 percentile range.
Again, the protections are there, but the gaps in coverage are where the damage happens. According to Symantec, when an incident occurred, 53% of the respondents suffered lost productivity and labor costs associated with dedicated IT resources to resolve the issue, followed by revenue loss, lost of data, and damaged brand protection.
The costs themselves, when combined, equate to $558,000 in revenue losses, $480,831 in brand or reputation losses, $366,301 in losses due to compliance additions and fines, and $174,309 in productivity losses.
So things are not so bad it seems, but there is still plenty of work to do.
“There is no silver bullet or single solution that will prevent all attacks, and companies should not rely solely on endpoint security technology for protection,” Symantec concluded.
Key areas of work include risk assessment and minimization. Knowing what needs to be protected, where it lives, and what steps are needed to accomplish these goals. It’s easy to recommend, and these processes have existed for a long time, but actually achieving these goals seems to be the hard part.