Recent Industry Reports and Updates

*Ponemon is one of many cost-of-breach benchmarking reports and they vary widely. This variance is because methods and samples vary widely. Ponemon’s study looks at small and mid-sized organizations.

Average cost of breaches is small to mid-sized companies has been between $3.5 MM and $4.0 MM over the past five years.

Read Full Article

Accenture Cyber Threatscape Report

The two most critical things for you to know about this report are:

The diminishing cybersecurity budgets paired with the growing efficiencies in malware has made cybersecurity attacks much more common and effective.

Attackers are focusing more on attacking the supply chain. Your cloud providers may be your new weakest link.

Read Full Article

Verizon Data Breach Investigations Report

DBIR has been paying more attention to assets that are effected by incidents. These asset classes were the most commonly exploited among the general population in the previous year:

1. Servers (3-year trend increasing)
2. People (3-year trend increasing)
3. Development systems (3-year trend is stable)
4. Media (3-year decreasing trend)
5. Kiosks (3-year stable trend)
6. Network devices (stable trend)

Read Full Article

NetDiligence Cyber Claims Study

The most critical thing for you to know about this study is that two-thirds of cyber insurance claims are associated with liability (regulatory fines, litigation and settlements). Those are the easiest to reduce if you just do a risk assessment. When risk assessments don’t show a plan based on reasonable controls, litigators and regulators go into action and cause your breach costs to triple.

Read Full Article

Proofpoint State of the Phish

The most critical thing for you to know about this study is that remote workers’ home networks are not secure. Fewer than half of home users secure their network routers with passwords. About two-thirds do not change default passwords on routers. About 80% do not update firmware on routers. Because of the shift to remote workers, the perimeter has almost disappeared.

Read Full Article