Business shuns key standards on IT security

19 Feb 2003

Be the first to comment

A Computing logo

The National Computing Centre (NCC) says companies are rejecting standards that could improve IT security because they think they are too complex and expensive.

The independent IT research group says users are avoiding standards such as BS7799 for security and ISO9001/TickIT for quality in favour of 'quick fix' alternatives.

The NCC says a 30 per cent drop in ISO9001 certifications is worrying because the standard is seen as a remedy to software quality problems.

'The usability of standards has moved on over the past 10 years, but attitudes haven't,' said NCC head of standards Daniel Dresner. 'Organisations are missing out on clear benchmarking advice for security and quality that only gets attention when systems are breached.'

The NCC has published a report on the benefits of adopting standards. Visit www.ncc.co.uk for more details.

Reader comments

Have your say on this article

All fields required. Your email address will not be displayed on the site.

By submitting a comment you agree to abide by our Terms & Conditions

  • Digg
  • Tweet

Newsletters

Sign up for our FREE newsletters

Technology Patent Wars

Large companies such as Microsoft, Facebook and Google have been hoovering up technology patents recently. Is this stifling innovation?

88 %

5 %

7 %