Why data breaches have become ‘normalized’ and 6 things CISOs can do to prevent them

by | May 19, 2024 | Technology

Join us in returning to NYC on June 5th to collaborate with executive leaders in exploring comprehensive methods for auditing AI models regarding bias, performance, and ethical compliance across diverse organizations. Find out how you can attend here.

Every week, a new data breach threatens enterprise organizations worldwide, forcing a re-evaluation of cybersecurity strategies to protect consumers. In recent months, we’ve seen major breaches at companies like 23&Me, Okta, United Healthcare and American Express — putting incredibly sensitive consumer data at risk. Between 2022 and 2023, there was a 20% increase in data breaches. And with Microsoft, Roku and many other companies already battling data breaches in the first months of 2024, this unfortunate trend shows no sign of slowing down. 

The Okta breach, which affected all of their customers due to an employee’s use of a personal Google profile on a company laptop, underscores the criticality of the human element in cybersecurity. According to the Verizon DBIR 2024, 74% of all breaches include the human element, with people being involved either via error, privilege misuse, use of stolen credentials or social engineering.  

The continued role of human error in cyber breaches is a clear sign that cybersecurity training as a control approach has categorically failed the market. The Okta incident is a grave reminder of the vulnerabilities that can arise from seemingly innocuous behaviors, like signing into a personal account on a work device, which may contravene established security policies. With this in mind, it’s crucial that CISOs and their teams ensure employees are aware of these vulnerabilities, in addition to building a system that’s resilient to breaches.

What should be on CISO priority lists (if they’re not already)

Here are six items that CISOs should focus on in 2024 to protect their organizations from the risk of a data breach:

VB Event
The AI Impact Tour: The AI Audit

Join us as we return to NYC on June 5th to engage with top executive leaders, delving into strategies for auditing AI models to ensure fairness, optimal performance, and ethical compliance across diverse organizations. Se …

Article Attribution | Read More at Article Source

[mwai_chat context=”Let’s have a discussion about this article:nn
Join us in returning to NYC on June 5th to collaborate with executive leaders in exploring comprehensive methods for auditing AI models regarding bias, performance, and ethical compliance across diverse organizations. Find out how you can attend here.

Every week, a new data breach threatens enterprise organizations worldwide, forcing a re-evaluation of cybersecurity strategies to protect consumers. In recent months, we’ve seen major breaches at companies like 23&Me, Okta, United Healthcare and American Express — putting incredibly sensitive consumer data at risk. Between 2022 and 2023, there was a 20% increase in data breaches. And with Microsoft, Roku and many other companies already battling data breaches in the first months of 2024, this unfortunate trend shows no sign of slowing down. 

The Okta breach, which affected all of their customers due to an employee’s use of a personal Google profile on a company laptop, underscores the criticality of the human element in cybersecurity. According to the Verizon DBIR 2024, 74% of all breaches include the human element, with people being involved either via error, privilege misuse, use of stolen credentials or social engineering.  

The continued role of human error in cyber breaches is a clear sign that cybersecurity training as a control approach has categorically failed the market. The Okta incident is a grave reminder of the vulnerabilities that can arise from seemingly innocuous behaviors, like signing into a personal account on a work device, which may contravene established security policies. With this in mind, it’s crucial that CISOs and their teams ensure employees are aware of these vulnerabilities, in addition to building a system that’s resilient to breaches.

What should be on CISO priority lists (if they’re not already)

Here are six items that CISOs should focus on in 2024 to protect their organizations from the risk of a data breach:

VB Event
The AI Impact Tour: The AI Audit

Join us as we return to NYC on June 5th to engage with top executive leaders, delving into strategies for auditing AI models to ensure fairness, optimal performance, and ethical compliance across diverse organizations. Se …nnDiscussion:nn” ai_name=”RocketNews AI: ” start_sentence=”Can I tell you more about this article?” text_input_placeholder=”Type ‘Yes'”]

Share This