IDC & T.E.N. Survey - “What Keeps You Up at Night?”

Note: Contact information is used so that T.E.N. can manage distribution in order to respect your inbox once you have responded. All data collected will remain anonymous.

Question Title

* 1. Please provide the following information:

Name:

Title:

Company:

Email: *

Industry:

No. Employees:

Revenue:

IT Security Budget: *

Question Title

* 2. IMPACT: Please rate the following cost/loss scenarios due to breach or security issues. Please assume all scenarios are confirmed and consider impact even if the probability is very low. (1 = VERY LOW to 10 = VERY HIGH IMPACT)

	1 = LOW	2	3	4	5	6	7	8	9	10 = HIGH
Payment for $10,000 goods not received (due to breach)	Payment for $10,000 goods not received (due to breach) 1 = LOW	Payment for $10,000 goods not received (due to breach) 2	Payment for $10,000 goods not received (due to breach) 3	Payment for $10,000 goods not received (due to breach) 4	Payment for $10,000 goods not received (due to breach) 5	Payment for $10,000 goods not received (due to breach) 6	Payment for $10,000 goods not received (due to breach) 7	Payment for $10,000 goods not received (due to breach) 8	Payment for $10,000 goods not received (due to breach) 9	Payment for $10,000 goods not received (due to breach) 10 = HIGH
Sony-style breach	Sony-style breach 1 = LOW	Sony-style breach 2	Sony-style breach 3	Sony-style breach 4	Sony-style breach 5	Sony-style breach 6	Sony-style breach 7	Sony-style breach 8	Sony-style breach 9	Sony-style breach 10 = HIGH
Leak of key product/service design documents	Leak of key product/service design documents 1 = LOW	Leak of key product/service design documents 2	Leak of key product/service design documents 3	Leak of key product/service design documents 4	Leak of key product/service design documents 5	Leak of key product/service design documents 6	Leak of key product/service design documents 7	Leak of key product/service design documents 8	Leak of key product/service design documents 9	Leak of key product/service design documents 10 = HIGH
Company-wide losses due to spam for a month	Company-wide losses due to spam for a month 1 = LOW	Company-wide losses due to spam for a month 2	Company-wide losses due to spam for a month 3	Company-wide losses due to spam for a month 4	Company-wide losses due to spam for a month 5	Company-wide losses due to spam for a month 6	Company-wide losses due to spam for a month 7	Company-wide losses due to spam for a month 8	Company-wide losses due to spam for a month 9	Company-wide losses due to spam for a month 10 = HIGH
Loss of 25% of PCI credit card records	Loss of 25% of PCI credit card records 1 = LOW	Loss of 25% of PCI credit card records 2	Loss of 25% of PCI credit card records 3	Loss of 25% of PCI credit card records 4	Loss of 25% of PCI credit card records 5	Loss of 25% of PCI credit card records 6	Loss of 25% of PCI credit card records 7	Loss of 25% of PCI credit card records 8	Loss of 25% of PCI credit card records 9	Loss of 25% of PCI credit card records 10 = HIGH
Loss of 75% of PCI credit card records	Loss of 75% of PCI credit card records 1 = LOW	Loss of 75% of PCI credit card records 2	Loss of 75% of PCI credit card records 3	Loss of 75% of PCI credit card records 4	Loss of 75% of PCI credit card records 5	Loss of 75% of PCI credit card records 6	Loss of 75% of PCI credit card records 7	Loss of 75% of PCI credit card records 8	Loss of 75% of PCI credit card records 9	Loss of 75% of PCI credit card records 10 = HIGH
Unrecoverable wire transfer of $250,000	Unrecoverable wire transfer of $250,000 1 = LOW	Unrecoverable wire transfer of $250,000 2	Unrecoverable wire transfer of $250,000 3	Unrecoverable wire transfer of $250,000 4	Unrecoverable wire transfer of $250,000 5	Unrecoverable wire transfer of $250,000 6	Unrecoverable wire transfer of $250,000 7	Unrecoverable wire transfer of $250,000 8	Unrecoverable wire transfer of $250,000 9	Unrecoverable wire transfer of $250,000 10 = HIGH
Public-facing website unavailable for a week	Public-facing website unavailable for a week 1 = LOW	Public-facing website unavailable for a week 2	Public-facing website unavailable for a week 3	Public-facing website unavailable for a week 4	Public-facing website unavailable for a week 5	Public-facing website unavailable for a week 6	Public-facing website unavailable for a week 7	Public-facing website unavailable for a week 8	Public-facing website unavailable for a week 9	Public-facing website unavailable for a week 10 = HIGH
Leak of 50% of employee HR records	Leak of 50% of employee HR records 1 = LOW	Leak of 50% of employee HR records 2	Leak of 50% of employee HR records 3	Leak of 50% of employee HR records 4	Leak of 50% of employee HR records 5	Leak of 50% of employee HR records 6	Leak of 50% of employee HR records 7	Leak of 50% of employee HR records 8	Leak of 50% of employee HR records 9	Leak of 50% of employee HR records 10 = HIGH
IT systems found as source of major attack against partner	IT systems found as source of major attack against partner 1 = LOW	IT systems found as source of major attack against partner 2	IT systems found as source of major attack against partner 3	IT systems found as source of major attack against partner 4	IT systems found as source of major attack against partner 5	IT systems found as source of major attack against partner 6	IT systems found as source of major attack against partner 7	IT systems found as source of major attack against partner 8	IT systems found as source of major attack against partner 9	IT systems found as source of major attack against partner 10 = HIGH
Leak of significant financial results prior to public disclosure	Leak of significant financial results prior to public disclosure 1 = LOW	Leak of significant financial results prior to public disclosure 2	Leak of significant financial results prior to public disclosure 3	Leak of significant financial results prior to public disclosure 4	Leak of significant financial results prior to public disclosure 5	Leak of significant financial results prior to public disclosure 6	Leak of significant financial results prior to public disclosure 7	Leak of significant financial results prior to public disclosure 8	Leak of significant financial results prior to public disclosure 9	Leak of significant financial results prior to public disclosure 10 = HIGH
25% of employees without computer access for 3 days	25% of employees without computer access for 3 days 1 = LOW	25% of employees without computer access for 3 days 2	25% of employees without computer access for 3 days 3	25% of employees without computer access for 3 days 4	25% of employees without computer access for 3 days 5	25% of employees without computer access for 3 days 6	25% of employees without computer access for 3 days 7	25% of employees without computer access for 3 days 8	25% of employees without computer access for 3 days 9	25% of employees without computer access for 3 days 10 = HIGH
CEO or senior management infected with ransomware	CEO or senior management infected with ransomware 1 = LOW	CEO or senior management infected with ransomware 2	CEO or senior management infected with ransomware 3	CEO or senior management infected with ransomware 4	CEO or senior management infected with ransomware 5	CEO or senior management infected with ransomware 6	CEO or senior management infected with ransomware 7	CEO or senior management infected with ransomware 8	CEO or senior management infected with ransomware 9	CEO or senior management infected with ransomware 10 = HIGH
Target-style breach	Target-style breach 1 = LOW	Target-style breach 2	Target-style breach 3	Target-style breach 4	Target-style breach 5	Target-style breach 6	Target-style breach 7	Target-style breach 8	Target-style breach 9	Target-style breach 10 = HIGH
Cost of an average week of routine malware removals	Cost of an average week of routine malware removals 1 = LOW	Cost of an average week of routine malware removals 2	Cost of an average week of routine malware removals 3	Cost of an average week of routine malware removals 4	Cost of an average week of routine malware removals 5	Cost of an average week of routine malware removals 6	Cost of an average week of routine malware removals 7	Cost of an average week of routine malware removals 8	Cost of an average week of routine malware removals 9	Cost of an average week of routine malware removals 10 = HIGH
FTC action for violation of fair-trade regulations	FTC action for violation of fair-trade regulations 1 = LOW	FTC action for violation of fair-trade regulations 2	FTC action for violation of fair-trade regulations 3	FTC action for violation of fair-trade regulations 4	FTC action for violation of fair-trade regulations 5	FTC action for violation of fair-trade regulations 6	FTC action for violation of fair-trade regulations 7	FTC action for violation of fair-trade regulations 8	FTC action for violation of fair-trade regulations 9	FTC action for violation of fair-trade regulations 10 = HIGH
One year of IT security insurance premiums with no claims	One year of IT security insurance premiums with no claims 1 = LOW	One year of IT security insurance premiums with no claims 2	One year of IT security insurance premiums with no claims 3	One year of IT security insurance premiums with no claims 4	One year of IT security insurance premiums with no claims 5	One year of IT security insurance premiums with no claims 6	One year of IT security insurance premiums with no claims 7	One year of IT security insurance premiums with no claims 8	One year of IT security insurance premiums with no claims 9	One year of IT security insurance premiums with no claims 10 = HIGH
Leak of 10% of PHI/PII customer records	Leak of 10% of PHI/PII customer records 1 = LOW	Leak of 10% of PHI/PII customer records 2	Leak of 10% of PHI/PII customer records 3	Leak of 10% of PHI/PII customer records 4	Leak of 10% of PHI/PII customer records 5	Leak of 10% of PHI/PII customer records 6	Leak of 10% of PHI/PII customer records 7	Leak of 10% of PHI/PII customer records 8	Leak of 10% of PHI/PII customer records 9	Leak of 10% of PHI/PII customer records 10 = HIGH
Breach disclosure on front page of WSJ, etc.	Breach disclosure on front page of WSJ, etc. 1 = LOW	Breach disclosure on front page of WSJ, etc. 2	Breach disclosure on front page of WSJ, etc. 3	Breach disclosure on front page of WSJ, etc. 4	Breach disclosure on front page of WSJ, etc. 5	Breach disclosure on front page of WSJ, etc. 6	Breach disclosure on front page of WSJ, etc. 7	Breach disclosure on front page of WSJ, etc. 8	Breach disclosure on front page of WSJ, etc. 9	Breach disclosure on front page of WSJ, etc. 10 = HIGH
Leak of RFP response to competitor prior to award	Leak of RFP response to competitor prior to award 1 = LOW	Leak of RFP response to competitor prior to award 2	Leak of RFP response to competitor prior to award 3	Leak of RFP response to competitor prior to award 4	Leak of RFP response to competitor prior to award 5	Leak of RFP response to competitor prior to award 6	Leak of RFP response to competitor prior to award 7	Leak of RFP response to competitor prior to award 8	Leak of RFP response to competitor prior to award 9	Leak of RFP response to competitor prior to award 10 = HIGH
EU Global Data Privacy Regulation (GDPR) violation	EU Global Data Privacy Regulation (GDPR) violation 1 = LOW	EU Global Data Privacy Regulation (GDPR) violation 2	EU Global Data Privacy Regulation (GDPR) violation 3	EU Global Data Privacy Regulation (GDPR) violation 4	EU Global Data Privacy Regulation (GDPR) violation 5	EU Global Data Privacy Regulation (GDPR) violation 6	EU Global Data Privacy Regulation (GDPR) violation 7	EU Global Data Privacy Regulation (GDPR) violation 8	EU Global Data Privacy Regulation (GDPR) violation 9	EU Global Data Privacy Regulation (GDPR) violation 10 = HIGH
SEC or SOX rule violation	SEC or SOX rule violation 1 = LOW	SEC or SOX rule violation 2	SEC or SOX rule violation 3	SEC or SOX rule violation 4	SEC or SOX rule violation 5	SEC or SOX rule violation 6	SEC or SOX rule violation 7	SEC or SOX rule violation 8	SEC or SOX rule violation 9	SEC or SOX rule violation 10 = HIGH