Whose job is it to protect corporate data? Management comes to mind first, typically a CISO, CSO or CIO. Next we think of security professionals and IT managers, who currently feel they bear the brunt of the responsibility for data security (our own survey showed many fear a breach would mean losing their job).
The Care Quality Commission (CQC), an independent regulator of health and social care in the UK, recently completed a review of the data security standards at the NHS begun in 2015.
According to this breach report, nearly one-third of those breaches are attributed to “CEO spearphishing” schemes. This phishing scheme, while not new, has been a top scheme of choice for this year.
The Department of Health and Human Services (HHS) Office for Civil Rights (OCR) just released a brief on how to manage security incidents involving business associates, from ensuring policies and safeguards are adequate to being notified and responding effectively to a data breach.
According to the newly released 2016 Vormetric Data Threat Report, 90% of IT security pros in Financial Services feel vulnerable to a data breach. In addition, 44% of Financial Services organizations experienced a data breach, with 19% in the past year.
A recent survey showed that 63% of organizations in Australia experienced a cybersecurity incident or breach in 2015, with more than half of them listed as “serious.” Large scale breaches such as those experienced by Kmart and David Jones, and widely publicized breaches at Aussie Farmers Direct and Queensland TAFE, rocked consumer confidence on the state of data security in Australia.
The Sixth Annual Benchmark Study on Privacy and Security of Healthcare Data by the Ponemon Institute, on behalf of ID Experts, shows the continued targeting of healthcare organizations, due in large part to the high value of healthcare data.
Cybercrime in Australia is on the rise, with 63% of Australian organizations experiencing a cybersecurity incident or breach in the past year, with more than half of these breaches listed as “serious.” The survey also indicates that 71% of organizations have experienced mobile security incidents such as a lost device, data policy violation or staff disabling security features.
