Iron Mountain and PwC Information Risk Maturity Index. Key research findings [INFOGRAPHIC]

By: In: Information Management On: Jun 25, 2013

Iron Mountain and PwC Information Risk Maturity Index. Key research findings [INFOGRAPHIC]

Managing information is more complex today than it has ever been. European businesses face a shifting environment defined by rapidly increasing volumes of information in multiple formats; the explosion of social media; the proliferation of mobile devices; frequent changes in legislation, and a rising malicious threat. At the same time, many hope to realise an ambition to harness greater value from their information – a desire, if you like, to gain an information advantage over their competitors. All this at a time when the very resources required to manage the change and accommodate the ambition are under strain. For anyone dealing with information risk, information security and/or information management the landscape has changed beyond all recognition.

The increasing complexity brings increasing information risk. We worked with PwC to examine the state of information risk facing mid-sized businesses in Europe.

We spoke to CEOs, CFOs, CIOs and Directors, at 600 mid-sized businesses (250-2500 employees) in France, Germany, Hungary, the Netherlands, Spain and the United Kingdom, in order to provide insight from a senior business perspective into the nature and extent of the most pressing information risks and into how these are being managed at a senior level.

What’s changed since 2012?

In just over a year, awareness of information risk has grown, with businesses everywhere increasing their index score. The European average has risen from 40.6 last year to 56.8 against a target of 100. This is a step in the right direction but still falls well short of the ideal.

The progress is happening at a time when the risks are more serious and the consequences more concerning. An inadvertent disclosure today can result in significant financial penalties, it can leave your carefully earned reputation in tatters, the hard-earned loyalty of your customers broken beyond repair.

Our research suggests that the increased awareness is creating uncertainty, as businesses recognise the need to act but remain unclear as to where to turn or what to do next. Click on the infographic to see highlights from the research.

2013 was the second year for the Information Risk Maturity Index. This version can be downloaded from

← Get a strategy for making records management a priority Information security [INFOGRAPHIC]: employee attitudes to information →

Leave A Comment

About the author

Christian Toon

Christian Toon is a former Iron Mountain employee who now works closely with our business within his new role: Senior Cyber Security Expert at PwC UK. Christian's thought leadership in this space is well-acknowledged across the industry. Christian has obtained numerous industry specific and recognised qualifications, he is a qualified Prince2 Practitioner and ISO IEC 27001:2005 Lead Auditor as well as holding auditing qualifications with ISO 9001, ISO 18001 and 14001. Christian has also completed all the Information Assurance Levels from the National School of Government. Christian's application to the Institute of Information Security Professionals (IISP) is currently under review along with a potential application to further his development with an Masters in Information Security.