Are your staff allowed to surf the internet? If so, you are more likely to have your security compromised by a virus or worm, according to a new report from IDC Norway.

The biggest risk of viruses or worms comes from employees browsing the web, not from email attachments.

"In companies that allow private use of the internet, risk of infection through the internet is 3 to 3.5 times higher than in companies that did not," said the survey.

Nearly 40 per cent of the 200 Danish firms surveyed had been infected, even though 75 per cent had implemented a security policy.