2 ms·
> just simply don't care (Equifax etc). And, honestly, why should they? Security breaches have yet to hurt an actual company (they hurt users plenty, but not
by commandlinefan 9y ago
> just simply don't care (Equifax etc).
And, honestly, why should they? Security breaches have yet to hurt an actual company (they hurt users plenty, but not the organization that's actually responsible).
- mr_tristan 9y agoData breaches are climbing in cost to organizations. Here's a claim, that in 2017, the average breach costs $3.62 million. https://www.scrypt.com/blog/average-cost-data-breach-2017-3-62-million/ https://www.scrypt.com/blog/average-cost-data-breach-2017-3-... (I've seen similar claims in different ranges. Costs of breaches in the US are pretty high - over $7 million.) Even Equifax probably wants the 3-4 billion in valuation it's lost since the breach. The solution appears to be buying tools to avoid and respond to breaches quickly, instead of engaging and building in security awareness. (Microsoft's security development lifecycle comes to mind.) IMO, both approaches are likely cost effective, though I have no numbers or research to back that up.