David
Gibson, Varonis’ VP of strategy, says that, whilst he welcomes news
that 25 per cent of respondents said they were notified by letter of a
data breach
– up from 12 per cent seven years ago – this shows that consumers are
still at the end of the food chain when it comes to being informed about
their data.
“This
really is an unsatisfactory state of affairs. If a company I had
shopped with had suffered a data breach and lost my data, I’d really
want to know what
had happened – and what the firm was doing to protect my interests.
Many of the 72 per cent of consumers who had been informed - but were
dissatisfied – are almost certain to be shopping elsewhere in future,”
he said.
“As
well as telling us that consumers are being more informed about the
need for data protection – and will vote with their feet if the company
fails to meet
its clear obligations in keeping customers informed – I would argue
that firms need to do all in their power to prevent a breach from taking
place in the first place, or lose their customers as a result,” he
added.
The
Varonis VP of strategy went on to say that it is interesting to note
that the increase in advisory letters is probably due to the statutory
requirements
imposed on companies by 47 states in the US to notify when personal
information has been lost or stolen.
As
officials with Experian – the sponsor of this Ponemon report – state,
it is important for companies to do everything possible to safeguard
consumer data,
it's just as important to communicate effectively in the event of a
breach, he says.
I
would argue, however, that since the consequences of a data breach are
potentially so profound - and may involve the loss of a sizeable
proportion of your
customer base– that preventing a data breach from happening in the
first place should take absolute priority, he adds.
Gibson
explained that all organizations should regularly review the way they
protect their customer data, especially as the amounts of unstructured
data (80%
in most organizations) continue to grow. Unstructured data is
especially difficult to audit and track using conventional IT security
systems.
“Only
by reviewing their levels of protection can companies hope to
understand the problems that unstructured data now poses them in these
times of rising
levels of governance and data protection requirements,” he said.
“This
report – which serves to highlight the potential loss of customers that
a data breach will result in – will hopefully act as a wake-up call to
any company
which has customer data. A data loss and regulatory fine is bad enough,
but potentially losing a sizeable number of your existing customers as
well shows that failing to protect customer data is a disaster just
waiting to happen,” he added.
For more on Varonis Systems: www.varonis.com
No comments:
Post a Comment