Data security has been in the news constantly as of late--lots of headlines about breaches, arrests and the like. But some new research suggests that many companies are still woefully behind the curve when it comes to strong security practices.

A survey from Imperva and the Ponemon Institute of more than 500 U.S. and multinational IT security practitioners found that "more than 70 percent of companies don't make data security a top strategic initiative, and 55 percent only secure credit card information and not sensitive information such as social security numbers, driver's license numbers, and bank account details."

The survey also found that 60 percent of respondents lack resources to comply with PCI. This frankly doesn't surprise me. The data security movement has largely been limited to big companies with big budgets. So what's the downside of weak practices? It's pretty obvious: A lot of these companies are gambling with their data, essentially hoping that nothing goes wrong. 

For more:
- here's the article from TMCnet

Related Articles:
PCI sets wireless security guidelines
Costs of fraud still on the rise
Take a multi-pronged approach to data security
Time to rethink your data retention policies