IT managers under-estimate the impact of data loss: survey

A mere seven per cent of respondents to a survey on data management believed data loss has a "high" impact on a business.

This is one of the key findings of a survey launched in Hong Kong yesterday by Kroll Ontrack, a US-based provider of data recovery solutions. The survey was conducted earlier this year by StollzNow Research. It asked IT managers from 945 small, medium and large companies in Hong Kong, Singapore and Australia about their views and experiences related to data management.

The survey found that just less than half (49 per cent) of all IT managers have reported a data loss situation in the last two years.

Daily backup absent

While larger companies may not fully appreciate the risks they face with data loss, it is the small business sector that appears to be most at risk. An alarming 49 per cent of small companies stated that they fail to back up their data on a daily basis.

This is despite the fact that nearly half of all participants had experienced data loss in their workplace in the past two years, and 36 per cent felt that data loss could have a significant impact on their business.

Small businesses were also less likely to test their backup systems on a regular basis, or to have implemented a policy for the preservation of data. While 61 per cent of overall respondents reported that their company had a formalised data retention policy, this figure fell to just 45 per cent for companies with 50 or fewer employees.

The survey notes that geography may influence data protection practices, with Singaporean companies appearing to manage their data most effectively. Both Hong Kong and Australian respondents were more likely to report having more than five instances of data loss in the last five years.

"The survey exposes a worrying approach to the storage, retention, backup and disposal of organisations' valuable data," said Adrian Briscoe, general manager, Data Recovery Asia Pacific, Kroll Ontrack. "Data loss and associated challenges can have a devastating effect on business productivity, yet the survey shows that many organisations are ill-equipped to deal with the problem and do not fully understand the importance of implementing simple procedures for protecting their data."

The need to adapt backup procedures to match changes in the IT environment was highlighted as a potential problem area for both large and small organisations, with only 52 per cent of companies having reviewed their disaster recovery plans in the last 12 months.

Virtualisation changes data recovery practice

"New technologies, such as virtualisation and client solutions like Citrix, have changed the way data is recovered," said Briscoe. "If a company's backup system fails to address these changes, when the inevitable happens and data is lost, it may be more difficult and expensive to recover."

Logging data erasure

In addition to system failure, data can be put at risk when end-of-life cycle or unwanted computer hardware is not completely and securely erased. This raises the potential for business-critical information to fall into the wrong hands. The survey found that nearly a quarter (24 per cent) of companies had no formal policy for erasing sensitive data, which means they are not destroying their sensitive information systematically.