The average cost of a data breach has risen to
3,86 million dollars, according to IBM in an annual study,
which represents a
increase in cost of 6,6%, this includes direct losses, indirect losses, related to the time and effort spent to resolve the breach,
and lost business opportunities, such as customers leaving due to
reputation damage.
Nearly 23% of companies, worldwide, are likely to
experience at least one breach in the next two years. Sectors such as
health and finance, due to the type of data they handle, face
the highest costs per record, until 400 Dollars, while the global average
cost per lost record is around 148 Dollars.
Las empresas de servicios financieros son las víctimas más
frecuentes, seguidas por las industrias de servicios, manufactura y tecnología.
Según dicho informe, en este momento se tardan 197 días en
identificar una filtración y 69 en contenerla, un ligero aumento respecto a los
191 and 66 días de 2017. Las empresas alemanas y sudafricanas son las más rápidas
en descubrir y contener las filtraciones (171 and 190 días respectivamente),
mientras que las de Oriente Medio (350) y Brasil (340) son las más lentas.
Tardar más de 100 días en descubrir una filtración puede incrementar
en más de un millón de dólares la factura final, tardar más de 30 días en
contenerla, una vez descubierta, puede añadir más de un millón de dólares. Invertir en
capacidades forenses y de monitorización, contratar un servicio de SOC, It can be valuable in the long term.
Según dicho informe, one of the most significant disbursements
that companies face, after data breaches, are the
notification costs. Once the regulation comes into effect
European Union, it is likely that companies will see “large increases in
todo el mundo” terms of notification costs.
For John Wheeler, Vice President of Strategy at IBM
Security, “The big question is what
precedents will be set when fines start being imposed. When the
first case arrives and people become aware of how high the fines can be,
we will see many executives tremble. One of the keys of the GDPR is that
it establishes a window of transparency of 72 hours. And that time can pass
very, very quickly. People need to understand that it is important to be
prepared”.