Numbers: ITIL, COBIT and More; Who Uses What?

Adoption rates around the world for ITIL and other guidelines. From the 2007 Global Information Security Survey.

By Derek Slater

January 04, 2008 — CSO —

Which guidelines or requirements does your organization follow? (Check all that apply.)

	Overall	NoAmerica	Europe	Asia
ITIL	45%	43%	50%	46%
COBIT	25%	32%	27%	19%
BS7799 / ISO17799 / 27001	36%	29%	43%	39%
SAS 70	18%	28%	11%	13%
PCI	23%	34%	17%	18%

Source: 2007 Global Information Security Survey, 5,555 overall respondents covering all regions of the world. For the full survey writeup, see The End of Innocence.

Read more about data protection in CSOonline's Data Protection section.

Numbers: ITIL, COBIT and More; Who Uses What?

Adoption rates around the world for ITIL and other guidelines. From the 2007 Global Information Security Survey.

By Derek Slater

Network security basics
Protection, detection, and reaction—those are the three underlying principles your security program must embody

Computer incident detection, response, forensics
Richard Bejtlich shows how to measure and improve the maturity of your incident response

A few good IT security metrics
Stop counting blocked malware attachments and measure things that can contribute to meaningful change

5 key cloud security trends
Cloud security is evolving rapidly—stay on top of it

IT risk assessment frameworks

How to do end-to-end encryption

How to compare and use enterprise antivirus

CSO Corporate Partners

Numbers: ITIL, COBIT and More; Who Uses What?

Adoption rates around the world for ITIL and other guidelines. From the 2007 Global Information Security Survey.

By Derek Slater

Network security basics Protection, detection, and reaction—those are the three underlying principles your security program must embody

Computer incident detection, response, forensics Richard Bejtlich shows how to measure and improve the maturity of your incident response

A few good IT security metrics Stop counting blocked malware attachments and measure things that can contribute to meaningful change

5 key cloud security trends Cloud security is evolving rapidly—stay on top of it

IT risk assessment frameworks

How to do end-to-end encryption

How to compare and use enterprise antivirus

CSO Corporate Partners

Network security basics
Protection, detection, and reaction—those are the three underlying principles your security program must embody

Computer incident detection, response, forensics
Richard Bejtlich shows how to measure and improve the maturity of your incident response

A few good IT security metrics
Stop counting blocked malware attachments and measure things that can contribute to meaningful change

5 key cloud security trends
Cloud security is evolving rapidly—stay on top of it