Twitter, RSS and Facebook logos

  Connect with Security Magazine!
     Follow us on Twitter and Facebook or subscribe to our newsletters or RSS feeds.

Security Newswire

Cost of a Data Breach Climbs Higher

The cost of a data breach? $214 per compromised record and averaged $7.2 million per data breach event, says the Ponemon's U.S. Cost of a Data Breach report.

It’s not only direct costs of a data breach, such as notification and legal defense costs that impact the bottom line for companies, says Dr. Larry Ponemon, but also indirect costs like lost customer business due to abnormal churn.

According to this year's study:

Rapid response to data breach costs more. For the second year, companies that quickly respond to data breaches pay more than companies that take longer. This year, they paid 54 percent more.

Malicious or criminal attacks are causing more breaches. This year malicious attacks were the root cause of 31 percent of the data breaches studied. This is up from 24 percent in 2009 and 12 percent in 2008. The significant jump in malicious attacks over the past two years is certainly indicative of the worsening threat environment, Dr. Ponemon says. Malicious attacks come from both outside and inside the organization, ranging from data-stealing malware to social engineering.

Companies are more proactively protecting themselves from malicious threats. Three response characteristics increased in frequency: the number of organizations responding quickly (within 30 days), those putting CISOs in charge of data breach response, and those with an above-average IT security posture. Moreover, breaches due to systems failures, lost or stolen devices and third-party mistakes all fell. And, average detection and escalation costs went up by 72 percent, suggesting that companies are investing more resources in prevention and detection. Taken together, these figures may indicate organizations are taking more active steps to thwart hostile attacks, he says.

Ponemon report illustrates need for comprehensive access assurance strategy

Kurt Johnson, vice president of strategy & corporate development, Courion
March 11, 2011 5:07 PM
The Ponemon report shows that the costs associated with data breaches are still on the rise, despite a 72 percent increase in detection and escalation technologies aimed at prevention. The fact that negligence is still the leading cause of data breaches (41 percent of all breaches) indicates that while companies are heavily investing in intrusion prevention, they are not properly managing access by their own employees to critical data such as customer information or patient records. Organizations need to better understand where their greatest sources of risk reside as well as who is accessing sensitive data, how and why. Even the best employees can make mistakes and compromise data. It is the organization’s responsibility to track activity and make sure that access to the most sensitive data is only granted to those for whom it is necessary to do their jobs. In order to avoid costly breaches, to the tune of millions of dollars and reputational damage, they must take steps to solidify their access assurance strategies so that only the right people get the right access to the right resources and do the right things with it.


You must register or login in order to post comments.

Multimedia

Videos

Image Galleries

Stanley Customer Appreciation Event at ASIS 2011

Customers enjoyed the annual Stanley customer appreciation event during ASIS 2011 in Orlando.

Podcasts

The New Age of Video Surveillance
In this podcast, Bill Lawrence, director of Service Solutions and Platforms for ADT Security Services, explains the growing interest in video surveillance by both government agencies as well as businesses of every stripe. He discusses what any organization should consider before investing heavily in the technology. Lawrence is a 25-year veteran of both the information technology and physical security industries, with extensive experience in network video surveillance and physical security convergence.
More Podcasts

Your Time

On a daily basis, how much work time do you estimate that you spend addressing an emergency or crisis within your organization?
See Poll Results Poll Archive

THE SECURITY STORE

comptiahighriseproductphoto
CompTIA Security+ Certification Study Guide
CompTIA's Security+ certification is a globally-recognized, vendor neutral exam that has helped over 60,000 IT professionals reach further and higher in their careers. The current Security+ exam (SY0-201) focuses more on being able to deal with security issues rather than just identifying them.
More Products

Clear Seas Research

Clear Seas ResearchWith access to over one million professionals and more than 60 industry-specific publications,Clear Seas Research offers relevant insights from those who know your industry best. Let us customize a market research solution that exceeds your marketing goals.

Vertical Sector Focus: Critical Infrastructures

criticalhomepagethumbFrom terrorism to vandalism, it’s preparedness, response, training and partnerships. Learn about some of the critical security issues facing this sector.

Visit the Critical Infrastructure page to read more.  

STAY CONNECTED

facebooklogo twitterlogo  linkedinlogo  YouTube icon