A new survey released today by the Computing Technology Industry Association claims the severity level of information security breaches experienced by organizations has show a marked increase over the past year.
The group reports that among organizations that reported a security breach in the past 12 months, the average severity level of the breach stood at 4.8 on a 0-10 scale, where 0 is not at all severe and 10 is very severe. The corresponding severity level rating for the past two years was at 2.3 and 2.6.
"This suggests that while the number of security breaches has stabilized, the breaches that are occurring are having a greater impact than ever on organizations,” said Brian McCarthy, chief operating officer, CompTIA.
What's interesting is that there doesn't appear to be a significant variation in breach severity by size of the company or organization.
The survey found that the average cost of a security breach across all companies was $369,388, driven by a handful of companies who estimated costs in excess of $10 million, reflecting the higher risk that larger companies face. About one-half of all respondents estimated that the cost of security breaches in the last 12 months was $10,000 or less.
As to the specific consequences of these breaches, the overall survey produced these results
Employee productivity impacted – 35 percent
Server or network downtime – 21 percent
Revenue-generating activities impacted – 20 percent
Physical assets impacted – 17 percent
Legal fees and/or fines – 8 percent
Perhaps even more ominously, nearly one in four (23 percent) orgnizations that reported a security breach indicated that they had an insider security breach or threat in the last year.
I work in ecommerce, and many merchants fail to see the urgency of this situation. The credit card companies have standards for how data is to be stored on servers, which are the PCI Standards (see http://www.pcicomplianceguide.org for more info). If a merchant is hosting with a company that is not PCI Certified, they risk fines and a possible ban from credit card transactions if that data is breached. Most merchants are not certified. Here's a link with more info and the list of PCI certified companies: http://volusion.com/tour/page-10.asp If merchants take PCI standards seriously, all online merchants benefit from the higher level of security online. Regards, Michelle Greer http://www.volusion.com ...
Comment By: Michelle Greer | 9/25/07 at 10:47 AM Tech Security Breaches Are Worsening, Industry Group Survey SaysVideo Rental Software for Adult Rental Business. Adult Video DVD, CD and Books Rental Business Management Software. This video rental software can be used to create an online rental business for adult video DVDs, CDs and books. It can also be customized to add the shopping cart module which can also provide your users an option to buy the video DVDs, CDs or books in addition to renting them. CommodityRentals.com now also offers full customization services for the Adult Industry video rental system and we can practically make your business storefront look and function the way you want. One of the examples would be to add an independent storefront to sell additional items other than the video DVDs, CDs or Books. This storefront can work independently but still be connected to your main database and can work through a single user login. Adult video rental software CommodityRentals.com provides a full fledge solution for all your Adult video rental and sales needs. We provide full support in terms of enhancing the product you buy from us and also additional services like data research and gathering and data entry services.
Comment By: harris moore | 10/5/07 at 5:18 AM Tech Security Breaches Are Worsening, Industry Group Survey Says