Study Reveals Rise in Security Breaches

Study Reveals Rise in Security Breaches – Organizations Taking Months to Detect and Contain Them.

RSA Conference 2013

SAN FRANCISCO–()–Solera Networks, the industry’s leading Big Data Security Intelligence and Analytics provider, today announced the results of the Ponemon Institute’s 2013 report, ‘The Post Breach Boom.’ Commissioned by Solera Networks, the novel research study polled 3,529 IT and IT security professionals in eight countries to understand the steps they are taking in the aftermath of malicious and non-malicious data breaches.

The Ponemon Institute surveyed security practitioners in the U.S., Canada, UK, Australia, Brazil, Japan, Singapore and United Arab Emirates. All participants in the study represent organizations that had one or more data security breaches in the past 24 months. Highlights of the research include the following findings:

  • Data breaches are on the rise and organizations are unprepared to detect them or resolve them—According to the majority of respondents, data breaches have increased in both severity (54 percent) and frequency (52 percent) in the past 24 months. While 63 percent say that knowing the root causes of breaches strengthens their organization’s security posture, only 40 percent say they have the tools, personnel and funding to pinpoint the root causes.
  • Breaches remain undiscovered and unresolved for months—On average, it is taking companies nearly three months (80 days) to discover a malicious breach and then more than four months (123 days) to resolve it.
  • Security defenses are not preventing a large portion of breaches—One third of malicious breaches are not being caught by any of the companies’ defensesthey are instead discovered when companies are notified by a third party, either law enforcement, a partner, customer or other partyor discovered by accident. Meanwhile, more than one third of non-malicious breaches (34 percent) are discovered accidentally.
  • Malicious breaches are targeting key information assets within organizations—Nearly half of malicious breaches (42 percent) targeted applications and more than one third (36 percent) targeted user accounts.
  • Impact and cost of breaches—On average, malicious breaches ($840,000) are significantly more costly than non-malicious data breaches ($470,000). For non-malicious breaches, lost reputation, brand value and image were reported as the most serious consequences by participants. For malicious breaches, organizations suffered lost time and productivity followed by loss of reputation.

“Security breaches continue to occupy the headlines on a daily basis, making it clear that there is still much work to be done before companies are prepared for the inevitability of today’s advanced targeted attacks,” said John Vecchi, vice president of marketing, Solera Networks. “In a post-prevention world, organizations must shift their focus toward attaining the real-time visibility, context and big data security analytics needed to see, detect, eradicate and respond to advanced malware and zero-day attacks.”

“Our study confirms that organizations are facing a growing flood of increasingly malicious data breaches, and they don’t have the tools, staff or resources to discover and resolve them,” said Larry Ponemon, chairman and founder, Ponemon Institute. “Meanwhile, months are passing as their key information assets are left exposed. The results demonstrate a clear need for greater and faster visibility—as well as a need to know the root cause of the breaches themselves—in order to close this persistent window of exposure.”

 

This entry was posted in Anti Virus, Disaster Recovery, IT Security and tagged , , , , , , , , , , . Bookmark the permalink.