Limiting access key to minimising data breaches, says expert
Hiring dedicated cybersecurity specialists, making sure their data is well encrypted and segmented, and only providing limited access to it is amongst the measures recommended companies undertake to minimise the likelihood of a data breach.
A recent study from IBM indicates that in 2019, on average, a single data breach costs $3.92 million for the affected company.
According to Vincentas Grinius, CEO of Heficed, a cloud, dedicated server and IP address provider, the growing number of cybercrime occurrences of this sort is forcing organisations to rethink their security efforts to ensure their data is well protected.
"The increasing number of data breaches can be partly curtailed if companies would hire cybersecurity specialists and make sure their data both stored and in-transit - is encrypted and segmented, while only partially accessible to employees," he explains.
The same survey reports that over the past five years, the financial damages inflicted by data breaches have increased by 12%. Finally, small and medium enterprises employing less than 500 people are the most vulnerable, since breach-affected companies of this size are potentially losing $2.5 million on average, a possibly stifling amount for growing companies.
"Some breaches, however, can get more devastating than others," states Grinius.
"This July, Capital One announced that their data had been compromised via a breach, leading to the information of 106 million customers being exposed for some time," he says.
"Handling the aftermath of this incident alone is expected to cost the company between $100 and $150 million, and this does not include the damage done to the banks reputation."
Nonetheless, Grinius says, there are steps organisations can take to minimise the probability of a potential data breach.
He highlights a couple of measures that, if applied by an organisation, would significantly diminish chances of a data breach.
"This might not look like a necessity for every business, but hiring a dedicated cybersecurity professional could the best single step organisations can take to ensure the integrity of their data," he says.
"Having an extra person on the payroll might come across as unnecessary expenses, but specialists of this sort prepare company-wide cybersecurity strategy, carry out periodic check-ups, and provide other employees with necessary tools and knowledge to minimise risks," explains Grinius.
Grinius says data encryption is something that, if applied by more companies, could potentially help diminish the growing global number of data breaches.
"When the data is encrypted, it can be only viewed by someone who has the encryption key. Otherwise, even if the companys data has leaked, the information would render useless for the illicit actors," he says.
"Enterprises need to encrypt their data not only when it is being stored on their local disks, known as data-at-rest, but also while it is being moved, known as data-in-transit," adds Grinius.
"It is not enough to have your data, or the whole storage unit of it, encrypted prior to storing it on a disk. It is equally essential to ensure the security of data-in-transit by encrypting the information before moving it, and using encrypted connections such as HTTPS or SSL, among others," he explains.
Finally, smaller enterprises can improve their cybersecurity standing by segmenting their data and limiting access to it, Grinius says.
"While this strategy can be troublesome to apply for companies with vast numbers of employees, organisations owning comparably small amounts of data and a lesser count of employees can undoubtedly benefit from this method," he states.
"When a company provides only a minimum amount of access needed for the employees to fulfil their roles, the risk of wide-spread breach greatly diminishes," Grinius says.
"What is beneficial about this approach, is the fact that even though the data during a breach might get exposed, the breach wont be system-wide, as the stored data is highly segmented."
