Call: +44 (0)1904 557620 Call

Pete Finnigan's Oracle Security Weblog

This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.

[Previous entry: "An Expert's Perspective on the VA Data Theft"] [Next entry: "Building a Simple Firewall Using Oracle Net"]

The DTI security breach survey is out

I saw at the weekend that the DTI's security breach survey for 2006 had been released in April. This is an interesting survey produced by PWC for the DTI (Department of Trade and Industry). The "DTI Information Security Breaches Survey 2006 – full survey results" details links to the executive summary and also to the full report. I have read the "executive summary" which makes interesting reading on a number of levels. First is that at a high level there seems to be improvement since last time the survey was done in 2004. At a lower level though the figures tell a different story and it seems to be about expenditure and budget. A shocking 14% of companies do not spend any of their budgets on security! and 18% of big companies admitted they had discovered users sharing ID's and performing unathorised access to systems. It makes interesting reading.