Figure 10: Contributing Factors to Electronic Attacks - Australia
  2004 2003
Lack of control/knowledge of network changes 8% 10%
Lack of control associated with shared acess to your network by third parties 11% 7%
Remote accessibility and/or connectivity of your network to the Internet 24% 19%
Poor security culture in organisation 46% 49%
Lack of security technologies 18% 14%
Inadequate human resources for system hardening and other security practices and procedures 40% 33%
Inadequate staff training and education in security practices and procedures 49% 42%
Exploitation of insider knowledge or access 17% 14%
Exploitation of unpatched or unprotected software vulnerabilites 60% 29%
Exploitation of default (just out of the box) operating system configurations 27% 22%
Exploitation of misconfigured operating systems, applications or network devices 34% 29%
None of the above 9% 18%
Other 7% 5%