« Sometimes you need a 10KG hammer | Main | PCI DSS 1.1 can make retailers more secure »

Small business security effectiveness

A small to medium-sized business spends a lot more per employee (up to 8x more) on security than large firms. Not surprisingly - since a large company has negotiating power and volume discounts on the purchasing side and economies of scale on the operating end. For sure - one of those scalable unified security appliances (that cost 150k) that look like a good deal for the US Air Force is gonna be mighty expensive per seat for a 300 person law office.

Although, many SMEs may be less aware of the security technology latest and greatest - they are probably more aware of their own vulnerabilities - being smaller and flatter organizations - the risk assessment tends to be much simpler and clear to a business decision maker.

This means that practical threat analysis, that provides a cost-effective, prioritized risk mitigation plan becomes a killer when combined with economies of scale and volume discounts. Buy the right thing at the cheapest price.

Just a thought.

About

This page contains a single entry from the blog posted on October 15, 2007 11:39 AM.

The previous post in this blog was Sometimes you need a 10KG hammer.

The next post in this blog is PCI DSS 1.1 can make retailers more secure.

Many more can be found on the main index page or by looking through the archives.

Creative Commons License
This weblog is licensed under a Creative Commons License.
Powered by
Movable Type 3.32
Willem de Kooning said that "The trouble with being poor is that it takes up all your time."