sb-nz logo
Story image

Almost half of NZ businesses unprepared for data breaches

22 Nov 2018

Forty-five percent of New Zealand businesses rate themselves as not secure on both managing security from different endpoints and protecting company data when employees are working remotely, a study by HP has found.

Only 50% of businesses feel any confidence that they would cope if their business experienced a significant cybersecurity breach.

 The HP New Zealand IT Security Study, conducted in September 2018, surveyed 434 New Zealand small to large businesses across the services, production, retail and hospitality, health and education, and distribution industries.

A key objective of the research was to identify New Zealand SMBs’ approach to IT security, including policies, procedures and risk management and where their perceived weaknesses exist.

“The consequences of a data breach are severe; from financial to brand and reputation damage,” says HP New Zealand managing director Grant Hopkins.

“Organisations need to be vigilant about implementing processes that regularly monitor, detect and report data breaches. Running regular risk assessments and managing your endpoint security is critical in keeping businesses data safe.”

As more New Zealanders work remotely, use personal devices in the workplace, and work in public spaces, traditional security measures and antivirus programs are becoming less effective.

Sixty percent of businesses regularly allow remote working (and remote access to company data) but only 42% of them have a security policy in place.

Furthermore, while visual hacking represented the area of greatest perceived weakness, only one in five businesses have integrated privacy screens on desktops/laptops to protect this type of breach.

Many IT departments tend to focus their efforts around PCs, tablets and other connected devices, but they neglect one of the largest areas of vulnerability: the printer.

The study found that New Zealand businesses have printers that are relatively insecure with 30% not offering any security features and only 35% of businesses including printers in their IT security assessment.

Without embedded security measures like real-time threat detection, automated monitoring, and data encryption, printers are left open and vulnerable to attack.

Not only does this make the confidential and sensitive documents that are printed, scanned and copied by the printer easily accessible for hackers, but risks the entire network being hacked, while bypassing the firewall altogether. 

“Endpoint security – at the device level – is critical. Organisations tend to rely solely on third-party software security to protect their devices when, in reality, stronger and better business security must be integrated into the device itself,” says Hopkins.

“With hackers able to bypass traditional network perimeter security and antivirus programs, it’s time to scrutinise a hardware’s security as closely, if not more, than our external security solutions.”

Today’s SMBs must implement processes and technologies designed to both proactively detect and prevent against a cyber attack.

Story image
Gartner: By 2023, 65% of the world will have personal data covered under modern privacy regulations
“Security and risk management (SRM) leaders need to help their organisation adapt their personal data handling practices without exposing the business to loss."More
Story image
Kaspersky finds red tape biggest barrier against cybersecurity initiatives
The most common obstacles that inhibit or delay the implementation of industrial cybersecurity projects include the inability to stop production (34%), and bureaucratic steps, such as a lengthy approval process (31%) and having too many decision-makers (23%). More
Story image
Fortinet’s ‘zero trust’ approach redefining security
Cornelius Mare, Fortinet A/NZ Director, Security Solutions, explains why taking a ‘zero trust network access’ approach to cybersecurity requires fully-integrated and comprehensive security services and policies.More
Link image
Why video-streaming companies should consider a multi-CDN strategy
Video streaming continues to grow each year, and in order to ensure quality of experience, new strategies must be leveraged.More
Story image
Vodafone brings xone IoT platform to Aotearoa
The platform is a localised version of a solution belonging to the Vodafone Group, providing key in-country functionality to technology.More
Story image
The SASE triangle: How a CASB protects managed apps
Enterprises that fail to adapt to the modern business world when it comes to security are likely to fall prey to data breaches and experience a host of other problems, writes Bitglass product marketing manager Will Houcheime.More