Action Not Mapping to Concern Level
While a majority agreed that it�s important to monitor (79.5 percent) and track (89.3 percent) the virtualization layer, nearly 25 percent were not collecting logs at all, nearly 35 percent were not monitoring user activity, nearly 47 were not monitoring access to critical data and nearly 40 percent were not reporting on access and controls for compliance purposes. In fact, a majority (52.70 percent) have not implemented tracking procedures for any layer of the virtual architecture.
In the rush to virtualization, security seems to be an afterthought, according to a survey of 302 IT professionals by security vendor Prism Microsystems. Though these pros seem aware of the dangers that come with virtualization, many are using get-by strategies and failing to heed best practices. Those practices could prove to be costly in the end – especially if there’s a data breach. That’s why, with money so tight, Prism Microsystems‘ Steve Lafferty, VP of marketing, advocates for a “single point of control to seamlessly monitor the entire IT infrastructure, from the physical to the virtual.�