Story image

Limiting access key to minimising data breaches, says expert

Hiring dedicated cybersecurity specialists, making sure their data is well encrypted and segmented, and only providing limited access to it is amongst the measures recommended companies undertake to minimise the likelihood of a data breach. 

A recent study from IBM indicates that in 2019, on average, a single data breach costs $3.92 million for the affected company.

According to Vincentas Grinius, CEO of Heficed, a cloud, dedicated server and IP address provider, the growing number of cybercrime occurrences of this sort is forcing organisations to rethink their security efforts to ensure their data is well protected.

"The increasing number of data breaches can be partly curtailed if companies would hire cybersecurity specialists and make sure their data both stored and in-transit - is encrypted and segmented, while only partially accessible to employees," he explains.

The same survey reports that over the past five years, the financial damages inflicted by data breaches have increased by 12%. Finally, small and medium enterprises employing less than 500 people are the most vulnerable, since breach-affected companies of this size are potentially losing $2.5 million on average, a possibly stifling amount for growing companies.

"Some breaches, however, can get more devastating than others," states Grinius.

"This July, Capital One announced that their data had been compromised via a breach, leading to the information of 106 million customers being exposed for some time," he says.

"Handling the aftermath of this incident alone is expected to cost the company between $100 and $150 million, and this does not include the damage done to the banks reputation."

Nonetheless, Grinius says, there are steps organisations can take to minimise the probability of a potential data breach. 

He highlights a couple of measures that, if applied by an organisation, would significantly diminish chances of a data breach.

"This might not look like a necessity for every business, but hiring a dedicated cybersecurity professional could the best single step organisations can take to ensure the integrity of their data," he says. 

"Having an extra person on the payroll might come across as unnecessary expenses, but specialists of this sort prepare company-wide cybersecurity strategy, carry out periodic check-ups, and provide other employees with necessary tools and knowledge to minimise risks," explains Grinius.

Grinius says data encryption is something that, if applied by more companies, could potentially help diminish the growing global number of data breaches. 

"When the data is encrypted, it can be only viewed by someone who has the encryption key. Otherwise, even if the companys data has leaked, the information would render useless for the illicit actors," he says.

"Enterprises need to encrypt their data not only when it is being stored on their local disks, known as data-at-rest, but also while it is being moved, known as data-in-transit," adds Grinius. 

"It is not enough to have your data, or the whole storage unit of it, encrypted prior to storing it on a disk. It is equally essential to ensure the security of data-in-transit by encrypting the information before moving it, and using encrypted connections such as HTTPS or SSL, among others," he explains.

Finally, smaller enterprises can improve their cybersecurity standing by segmenting their data and limiting access to it, Grinius says. 

"While this strategy can be troublesome to apply for companies with vast numbers of employees, organisations owning comparably small amounts of data and a lesser count of employees can undoubtedly benefit from this method," he states.

"When a company provides only a minimum amount of access needed for the employees to fulfil their roles, the risk of wide-spread breach greatly diminishes," Grinius says.

"What is beneficial about this approach, is the fact that even though the data during a breach might get exposed, the breach wont be system-wide, as the stored data is highly segmented."

Story image
11 Sep
Blue Prism rolls out new intelligent automation offering
“We are adding this flexibility without compromising on key enterprise features such as security and scalability. We’ve eliminated the guesswork and taken out any objections or barriers, so innovators and business leaders can begin their RPA journey.”More
Download image
How RMM, PSA, and IT Documentation work together for a cohesive overview
Most MSPs offer products from multiple vendors, which means systems often don’t work together well – or at all. More
Story image
Mobile-first communications lead to huge productivity gains, study shows
“The slow adoption of most corporate-issued collaboratiokn platforms and the lack of support for secure mobile messaging should be a waeup call to business leaders that they need to view mobile first as their primary employee communication and collaboration channel."More
Story image
17 Sep
Rackspace welcomes two new senior Asia Pacific execs
Sean Girvin succeeds Darryn McCoskery as managing director of Rackspace Australia and New Zealand; and Sandeep Bhargava steps into a newly created role as managing director of Asia-Pacific Japan.More
Story image
16 Sep
DNS amplification attacks increase 1000% since last year - Nexusguard
Enterprise networks and communications service providers (CSPs) need attack mitigation as DNS patch adoption creates new threats.More
Story image
13 Sep
IoT a hot topic in cybercriminal underbelly
"We've lifted the lid on the IoT threat landscape to find that cybercriminals are well on their way to creating a thriving marketplace for certain IoT-based attacks."More