[ISN] Deloitte Releases National Wireless Security Survey along with DSCI

Forwarded from: "Prabhu, Keith (IN - Mumbai)" <kprabhu (at) deloitte.com>

April 14, 2009

Enterprise Risk Services Division of Deloitte Touche Tohmatsu India 
Private Limited (Deloitte) conducted a wireless security survey in the 
month of October and November across 12 Indian cities. Today, Deloitte 
released the results of this survey titled, "Wireless Security Survey" 
along with DSCI.  NASSCOM established Data Security Council of India 
(DSCI) as a self-regulatory organization (SRO). DSCI has an independent 
Board of Directors, guided by a Steering Committee with members drawn 
from leading IT and BPO companies, and from the best IT products 
companies of the world.

The survey was aimed at assessing the use of security precautions and 
best practices in wireless environments across the country.

The key findings of the survey of the 35860 wireless networks seen are:

* 37% appeared to be unprotected i.e. without any encryption.

* 49% were using low level of protection i.e. Wired Equivalent Privacy 
  (WEP) encryption.

* Balance 14% were using the more secure Wi-Fi Protected Access 
  (WPA/WPA2).

* This makes around 86% of the observed wireless networks vulnerable.

The 12 cities surveyed were categorized into Group I and Group II cities 
based on size:

Group I - Bengaluru, Chennai, Hyderabad, Kolkata, Mumbai*, National-Capital Region (NCR)**.
Group II - Ahemdabad, Indore, Jaipur, Lucknow, Nagpur, Pune. 

*  Includes Navi Mumbai
** Includes Gurgaon and Noida regions.


The survey points out that the major risks that one might be exposed to 
including, unauthorized access to objectionable or banned sites, access 
to post objectionable material on websites, send threatening emails, 
extract bank account details causing monetary losses etc. This survey 
also provides guidelines for protecting wireless networks from 
unauthorized elements.  The survey can be downloaded from 
http://www.bcm-india.org/wifi_india.html.

If you need more information about the survey or need a printed copy 
please reach out on ersindia (at) deloitte.com The survey has to be read 
along with disclaimer mentioned on the last page of the survey.

Regards,

Keith Prabhu
Manager
Deloitte Touche Tohmatsu India Private Limited,
Direct: +91 22 6681 0715
Main: +91 22 6681 0500
Mobile: +91 98190 63 222
kprabhu (at) deloitte.com

 

Deloitte Touche Tohmatsu India Private Limited
3rd Floor, NASEOH Building,
Postal Colony,
Chembur, Mumbai - 400071.


--
LayerOne 2009, Information Security for the discerning professional. 
May 23-24 2009 @ The Anaheim Marriott in Anaheim, California 
Visit http://layerone.info for more information