That's in spite of an increased awareness among consumers about the need to protect their identity online, RSA Security said in the study released Wednesday. That gap between the perceived risk and the strength of safeguards against it could sap customer confidence in online business, hindering companies from taking advantage of the cost-savings and revenue potential of the Internet, the security firm said.
Get Up to Speed on... Enterprise security Get the latest headlines and company-specific news in our expanded GUTS section. | ||||
"Consumers are under the false impression that passwords provide enough security to protect personal information," said a statement from John Worrall, a vice president of worldwide marketing at RSA. "Forward-looking organizations that have a large number of people accessing electronic information--whether they are customers, employees or partners--are recognizing that more reliable forms of authentication are critical for securing important information, including personal information and corporate assets."
RSA commissioned the survey of more than 1,000 consumers, its second annual assessment of security perceptions and practices regarding identity theft and computer attacks. The report coincides with a conference on security held by the software maker in San Francisco this week.
The study found consumers are weak in the management of passwords and personal identification numbers used to make transactions online and through ATMs. About two in three people surveyed use fewer than five passwords, while more than one in 10 use only one password for everything.