Saving money by ignoring data security – a false economy?
We hear it in the news week in week out. So and so company has left a laptop on a train containing 4 million unencrypted customer records, a hacker has infiltrated an online payment system stealing thousands of unsuspecting UK consumer credit card details – even today I have walked through the door and the first news alert in my email begins, “ChoicePoint to pay $275,000 for second data breach.” I can’t help but wonder why?
Recently, I’ve begun research into the current state of data security in the UK. As part of my research I contacted the ICO (Information Commissioner’s Office) and asked them to provide me with figures detailing reported breaches in the UK over the last few years. According to ICO figures, 2008 saw the loss of sensitive data on 341 separate occasions, spanning all industry sectors. So far this year, we as a nation have seen 348 instances of compromised data and we still have 2 1/2 months to go!!! Before I progress any further I must emphasise the use of the word ‘reported’. According to a study conducted by The Ponemon Institute using a sample of 615 UK based companies, 70% of the companies surveyed experienced a data breach in the last 12 months – a worrying discovery in itself. Even more surprisingly, nearly 40% of those surveyed failed to publicly announce a breach in their security, as there’s no legal or regulatory requirement to do so because they are a private sector organisation.
Taking into consideration the growing prevalence of digital business systems and processes over the past decade, we all must be aware of the importance of data security in our digitally dominated world. Especially in light of the abundance of publicity surrounding data breaches – surely it must weigh on the minds of CIO and IT personnel? So if we are all so acutely aware of the risk, why do some companies not take the precautionary measures required to secure the data they hold or transmit? I can only make assumptions regarding the factors involved and I would speculate its the cumulative result of a number of factors.
Firstly, the big stumbling block – finance. From experience, I know there are companies out there that struggle securing the necessary funds from their annual budget to address data security as its often deemed non-critical, especially in the current economic climate. With the inhibitive cost of some of the security solutions out there, I can’t really blame them. On the other hand, there are lots of providers emerging in the marketplace offering affordable, scalable solutions, that provide not only the data security they need but also the ability to streamline business processes and reduce operational costs. Solutions such as this, can provide a significant return on investment and in the long term actually save money – a win-win situation!
The financial consequences of a data breach should also be taken into consideration. According to a study coordinated by The Ponemon Institute back in 2008, the average cost of a UK data breach incident is £1.73 million – substantially more than the cost of securing the data in the first place! Then you have to take into consideration the financial implications of a blow to a companies reputation – these intangible costs are likely to be well in excess of any fines.
Secondly, I feel the lack of legislation has a big part to play in the predicament organisations find themselves facing. Apart from a select few e.g. PCI DSS, the only legal guidelines UK businesses are currently required to abide by, are those outlined in the Data Protection Act. The problem is, up until very recently the majority of this act has been unenforceable (more to come on that later). I can’t help but feel this lack of legislation and an authority body promotes a certain amount of apathy in organisations. If all of these companies in the public eye are receiving minimal fines and a slap on the wrist for contravening Data Protection laws, what is the motivation to spend money on securing data? Consequently, many organisations opt to sit on an unexploded time bomb and when it finally blows (which it inevitably will) hold their breath and hope no one gets wind of the incident during the aftermath and leaks the news to valued customers.
The recently appointed UK Information Commissioner, Christopher Graham, has addressed this very issue during his first speech at the Annual Privacy and Data Conference in London on 8th October. The crux of his speech is that change is afoot. Mr Graham made it perfectly clear that data privacy and information security are now ‘top of the agenda’ and with the new powers of enforcement being granted to the ICO in the forthcoming Coroners and Justice Bill, he fully intends to use them to maximum effect. He added: “we’re going to have the resources to go after the bad boys – there’s a well-funded regulator that will hit you hard if you get it wrong… if you don’t take this stuff seriously its going to bite you in the bum.” He also stated, “If you breach the law you’re going to be in trouble. It (compliance with data privacy law) isn’t a nice to have – it’s the law of the land. You will destroy brand value and reputation (by ignoring it).” Some strong words!
Finally, although aware of the viable threat of data breaches, from our experience as security specialists we have dealt with a number of companies who believe their data is completely secure when in reality – it isn’t. Therefore a lack of insight and knowledge when addressing company wide data security systems can result in inadequate protection. This is where the value of a security specialist comes into play. We can’t be masters of all trades, sometimes its beneficial in the long run to let the experts work their magic as data security can be a minefield, its best left to the professionals.
Taking into consideration the consequences associated with the loss of sensitive data, such as the tangible cost to the company and more significantly a serious blow to reputation, is it really worth risking the security of your company’s data to save money in the short term?
See here to find out more about some of the secure file transfer products available in the marketplace.






Skyzzx…
Great blog post, saw on…
Look at me…
I am happy to find your distinguished way of writing the post. …
Vacation Rentals in Siesta Key …
[...]we like to link to other web sites on the web, even if they aren’t related to us, by linking to them. Below are some pages worth checking out[...]…
Bing results…
While searching a bit Bing and Yahoo I happily discovered this page in the search results and I do not think it match…
Great Content…
They have done such a great job with it. You cannot go wrong at all. …
Great Content…
The particulars and exact recommendation are insurance specifically what I was wanting. …
About our own…
Thanks for your marvelous posting! …
About our own…
I have bookmarked it and I am taking a look ahead to reading new article. …
Great Content…
The particulars and exact recommendation are insurance specifically what I was wanting. …
Online Article…
Great information, look into my post about this…
About our own…
Great post! I had not any information like this before. …
Living a Healthy Lifestyle Through Diet and Exercise…
I saw this really cool post today….
My post about…
I saw this really good post today….
{Just | Merely | Simply | Only | But} wanna {say | state | tell | admit} that this is {very useful | very helpful | invaluable | very beneficial | handy | extremely helpful}, Thanks for taking your time to write this. {”Hollywood is a place where p…
Yay google is my king assisted me to find this great web site ! . “I believe half the unhappiness in life comes from people being afraid to go straight at things.” by William J. Locke….
My story about…
I actually enjoyed reading it, you will be a great author. …
Check this out…
[...] that is the end of this article. Here you’ll find some sites that we think you’ll appreciate, just click the links over[...]……
My post about…
I saw this really great post today….
Everything about home…
Here you can find everything you want about renovation….
Answer for post…
I saw this really great post today. Thanks you for the post….
Answer for post…
I saw this really good post today. Thanks you….
Everything about home…
Here you can find everything you want about linen….
Everything about home…
Here you can find everything you want about furniture….
Everything about home…
Here you can find everything you want about fixtures….
Answer for post…
I saw this really good post today. Thanks you for the post….
Everything about home…
Here you can find everything you want about linen….
Everything about home…
Here you can find everything you want about renovation….
Answer for post…
I saw this really good post today. Thanks you….
Terry Walker…
[...]0 Thanks so much for giving everyone an extremely special chance to discover cn[...]…
ekonomisk stabiliseringspolitik…
[...]q I in addition to my friends were viewing the excellent secrets and techniqu ew[...]…
… [Trackback] …
[...] Read More Infos here: pro2col.com/blog/information-security-laws-are-evolving-what-price-do-you-put-on-your-companys-data/ [...] …
bleka tanderna…
[...]0 Do you mind if I quote a few of your posts as long as I provide credit and wo[...]…
billigt flygbolag paris…
[...]7 Do you mind if I quote a few of your posts as long as I provide credit and yv[...]…
Some Info…
thank you for sharing.great post….
News…
I was reading the Yahoo news and I saw this really interesting info…
Dorothy…
[...]y I own a similar site to this one and I was just curious if you get a lot of eu[...]…