The Cost of a Data Breach Report (“Report<\/u>“), conducted by the Ponemon Institute and published in 2021 by IBM Security, besides bringing data on breaches that occurred between May 2020 and March 2021, brought a few recommendations to lower the cost and thus the impact of a data breach.<\/p>\n
Key recommendations in the report include:<\/p>\n
(i)\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Investment in security orchestration, automation, and response (\u201cSOAR<\/u>\u201d) to help improve detection and response times; being certain that the use of artificial intelligence and security automation have proven and significantly decreased the average time to identify and respond to a data breach resulting in a lower average cost.<\/p>\n
(ii)\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Adoption of a zero-trust security model to help prevent unauthorized access to sensitive data. The organizations that implemented the zero-trust model had an average breach cost $1.76 million lower than organizations without zero-trust.<\/p>\n
(iii)\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Conducting incident response plan stress testing to increase cyber resiliency. Those organizations that put together incident response teams and tested their incident response plans had a total average cost of a data breach $2.46 million lower than organizations that experienced a breach without a tested incident response plan.<\/p>\n
(iv)\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Use of tools that help protect and monitor remote terminals and employees.<\/p>\n
(v)\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Investment in control, risk management and compliance programs; an internal framework for audits, assessing risk across the enterprise and monitoring compliance with control requirements, can help improve an organization’s ability to detect a data breach and escalate containment efforts.<\/p>\n
(vi)\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Protection of sensitive data in cloud environments using policy and encryption.<\/p>\n
(vii)\u00a0\u00a0\u00a0\u00a0 Adopting an open security architecture and minimizing complexity of IT and security environments; security tools with the ability to share data between disparate systems can help security teams detect incidents in complex hybrid multi-cloud environments. A managed security services provider can also help simplify security and risk with continuous monitoring, integrated solutions and services.<\/p>\n
To provide these recommendations, based on a global average, the Report combined results of evaluations conducted by537 organizations located 17 countries and regions and established in 17 fields.<\/p>\n
<\/p>\n
This article is intended exclusively to provide information and does not contain any opinion, recommendation or legal advice from Kestener & Vieira Advogados concerning the matters herein addressed. Copyrights are reserved to Kestener & Vieira Advogados.<\/em><\/p>","protected":false},"excerpt":{"rendered":" The Cost of a Data Breach Report (“Report“), conducted by the Ponemon Institute and published in 2021 by IBM Security, besides bringing data on breaches that occurred between May 2020 and March 2021, brought a few recommendations to lower the cost and thus the impact of a data breach. Key…<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[2],"tags":[],"class_list":["post-289","post","type-post","status-publish","format-standard","hentry","category-direito"],"_links":{"self":[{"href":"https:\/\/habeasdata.kvlaw.com.br\/en\/wp-json\/wp\/v2\/posts\/289","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/habeasdata.kvlaw.com.br\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/habeasdata.kvlaw.com.br\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/habeasdata.kvlaw.com.br\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/habeasdata.kvlaw.com.br\/en\/wp-json\/wp\/v2\/comments?post=289"}],"version-history":[{"count":4,"href":"https:\/\/habeasdata.kvlaw.com.br\/en\/wp-json\/wp\/v2\/posts\/289\/revisions"}],"predecessor-version":[{"id":305,"href":"https:\/\/habeasdata.kvlaw.com.br\/en\/wp-json\/wp\/v2\/posts\/289\/revisions\/305"}],"wp:attachment":[{"href":"https:\/\/habeasdata.kvlaw.com.br\/en\/wp-json\/wp\/v2\/media?parent=289"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/habeasdata.kvlaw.com.br\/en\/wp-json\/wp\/v2\/categories?post=289"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/habeasdata.kvlaw.com.br\/en\/wp-json\/wp\/v2\/tags?post=289"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}