IT security spend to rocket

Security managers plan to triple their expenditure on technology over the next four years, with two thirds seeing the internet as the number one driver behind the move.

But even with the budget increase, half of the 50 senior security managers questioned by Forrester Research said that lack of money would prevent them from implementing all the security measures that were required.

"What has kept us back is a lack of funds and staff," one computer equipment company said. "We have seven internal units wanting to do their own thing, and addressing that complexity is a huge task. Tools like intrusion detection and monitoring systems are still immature."

Frank Prince, an analyst at Forrester, and author of the Sizing The Security Market report, predicts that by 2005, many companies will have implemented automated ebusiness systems such as hands-free procurement. But this would have the effect of creating a number of potential new technology blind spots.

"Automated processes need automated security," he said. "Firms will struggle with cross-company security, as this requires agreeing on standards at many levels."

Chief executives demand action when problems flare up, but IT departments often do not have enough resources to deal with them. Companies should make business managers responsible for all aspects of security, and should formalise this by creating an integrated corporate security policy, said Prince.

"Charter the IT security department with the authority to evaluate and implement, but require a process that business managers sign off on exceptions to," he explained.

He added that over time, criminals will discover new ways to use the internet. But once legislators wake up to this there will be a number of new laws clamping down on these activities.

"Prosecutors will love these new laws because they will give them a new tool to incarcerate criminals. The public will love them because it will make them feel safer about the net, and legislators will love it because it will look like they have taken decisive action," he said. "But despite all the legal hoopla, internet crime will continue to grow."