Now Available:

line

Featured Resources:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Rebecca.

« SOX Amendment Defeated: Information security and SMBs | Main | Reducing Attack Exposure for Internet-Facing Applications »

New Study: More Confirmation That Spam Costs Businesses Significant $$

On April 2 Nucleus Research, Inc. released a study, "Spam: The Repeat Offender" which reports that, according to a survey of 849 email users, 90% of all email going into company networks is spam, and 66% of spam gets through corporate filters.

Other findings include:

* 86% of spam is adult-oriented solicitations

* 80% of spam is financial lending solicitations

* 76% of spam is retail offers

* Users spend an average of 4.5 minutes per week reviewing messages in their junk email files

* Users spend an average of 7.3 minutes per weeks searching for legitimate messages that were deleted by corporate email filters

* 18% of respondents want spammers should to do jail time; 1/3 of them think jail time should be more than 36 months.

* Over 50% of e-mail users believe convicted spammers should be fined at least $1 for each spam message distributed.

* U.S. businesses lose $70 billion annually in the time it takes for employees to read and deal with spam

* U.S. employees on average each receive 21 spam messages in their email inboxes each day; down from 29 daily in 2004

* Companies that quarantine spam costs $113 per user; companies that delete spam messages without user review costs $183 per user.

849 email users is certainly not a statistically representative number of the entire population, but the data is useful to demonstrate the ongoing problem with spam and how it impacts business.

I recently wrote about how image spam impacts business.

The statistic I found most interesting is that having a policy to delete spam without review costs businesses more than quarantining the spam. Perhaps this shows that most spam that is quarantined never gets reviewed by the intended recipients, thus saving significant time over having the recipients deleting the spam messages themselves.

TrackBack

TrackBack URL for this entry:
http://www.realtime-itcompliance.com/type/mt-tb.cgi/396

Comments

Those are very eye-opening numbers. I never see most of my junkmail because the filters take care of it for me, but I also know that often times legitimate email gets marked as spam, which results in all sort of miscommunication problems.
Since many spammers are now switching to images to bypass the filters, I wonder how these numbers might change in the future. The few junk emails that do make its way into my inbox seem to be on this sort.

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Rebecca Herold's Bio:

Rebecca Herold,CISSP, CIPP, CISM, CISA, FLMI, has been providing information security, privacy and regulatory assistance and services to organizations from a wide range of industries for over 18 years. Rebecca was instrumental in building the information security and privacy program while at Principal Financial Group, which was awarded the CSI Information Security Program of the Year Award in 1998. IT Security ranked Rebecca as one of the top 59 IT security influencers, and Computerworld put Rebecca their list of the 25 top privacy experts and on their list of the 9 best privacy consulting firms. Rebecca has been CPO for two consulting organizations, and has had her own information privacy, security and compliance business since 2004. Rebecca has written chapters for several books, dozens of articles, and has been writing a monthly privacy column for the CSI Alert newsletter since the beginning of 2001, and is working on her 11th book. Some of her other books include The Privacy Papers, Managing an Information Security and Privacy Awareness and Training Program, The Definitive Guide to Security Inside the Perimeter (Realtime Publishers), The Shortcut Guide to Improving IT Service Support through ITIL (Realtime Publishers), and The Practical Guide to HIPAA Privacy and Security Compliance. In addition, Rebecca is the leader of The Realtime IT Compliance Community where she posts to her IT Compliance weblog. You can contact Rebecca at: rebecca_herold@realtimepublishers.net.