Firms are failing to secure Wifi networks, Voice over Internet technologies (VoIP) and USB storage devices even though virtually all organisations are addressing other external IT security threats.

Forty per cent of respondents to a survey by the National Computing Centre (NCC) said their wireless networks are either partially or not at all secured. And only 15 per cent have implemented VoIP security.

Running unsecured Wifi is like locking the front door, but leaving the windows open, said NCC managing director Stefan Foster.

‘Fraudsters are increasingly targeting IT systems and the growing use of Wifi is attracting their attention both inside and outside of the office environment,’ said Foster.

‘Unsecure wireless is putting organisations and those who interact with them at unnecessary risk,’ he said.

Nearly 75 per cent of respondents recognise the proliferation of high capacity USB data devices as a liability. But only 11 per cent have fully implemented controls on USB/data writing devices on the desktop.

The average IT department spends just 3.3 per cent of its total budget on security. The highest proportion is in the education sector, but the highest per-capita spending is in financial services.