The first annual Consumer Business Security Survey benchmarks IT Security in the Consumer Business industry (CB). The survey indicates that retail and consumer products companies need to take stock when it comes to security:

1. Security is seen as a major concern within retail and consumer products companies and management and executives are beginning to focus on it - 93% of security managers now report to the Executive.

2. The primary concern is still about the protection of personal data, with increased focus on this area as a result of recent headlines, combined with regulatory and compliance requirements such as the Payment Card Industry Data Security Standard, designed to protect payment card information from unauthorised use and data loss. 86% of companies have not performed an inventory to understand where their data is stored and how it is transmitted.

3. Most companies surveyed have taken the basic steps by identifying a security officer/manager and putting in place the basic security protective measures, but they have not reached the level of maturity we see in other industries. For example, only 20% of CB respondents have a formally defined information security strategy. This is well below the 54% reported in Deloitte's 2007 TMT Global Security Survey and 63% reported in Deloitte's 2007 Global Financial Services Security Survey.

Mike Maddison, UK Head of Security and Privacy at Deloitte, said: “Most companies surveyed have taken the basic steps by identifying a security manager and putting in place the basic security protective measures, but they have not reached the level of maturity we see in other industries."

For further information download our 2007 Consumer Business Security Survey (PDF 1648kb)  

Read our related news release : Taking Stock: Consumer Business Security Survey