UK businesses are struggling to enforce information security as IT managers become detached from security processes.
A survey of 100 IT managers at firms with more than 1,000 employees, commissioned by risk management and information security firm DNV IT Global Services, found that half of them believe colleagues are the biggest security problem.
The survey also revealed that 40% of IT managers were unable to adequately recall formal policy briefings over security.
And 20% questioned said they had never been formally briefed on security policy and procedures in their organisation.
One in six respondents cited failure of leadership by senior corporate executives as their organisation's weakest link in their security regime.
Whilst 50% overall of IT managers believed colleagues to be the biggest security risk, this figure rose to 64% in the retail sector, particularly worrying for customers handing over bank card details for purchases.
In the financial sector, 44% of IT managers saw their own workforce as a security weak point.