TESTIMONIALS

“Received the latest edition of Professional Security Magazine, once again a very enjoyable magazine to read, interesting content keeps me reading from front to back. Keep up the good work on such an informative magazine.”

Graham Penn
ALL TESTIMONIALS
FIND A BUSINESS

Would you like your business to be added to this list?

ADD LISTING
FEATURED COMPANY
Cyber

Data Protection Day

by Mark Rowe
Data Protection Day on January 28 aims to raise awareness around the importance of managing and protecting personal data:, such as an individual’s name, number, and email address. Here are some comments, around how it is important for organisations and individuals to recognise the signs, and take the necessary precautions.
Sam Wheeler, SOC Manager at Systal said: “As our daily lives are becoming increasingly attached to the internet, it is imperative to adopt some very basic personal habits to protect our digital data. Updating your passwords regularly and making them strong and unique for each account of yours – such as your email, social media and online banking – are two key measures to keep malicious eyes at bay. Turning on two-factor (2FA/MFA) authentication wherever possible would further help in adding an additional layer of security and keep your devices and applications updated to defend against the latest threats, which are becoming more sophisticated and hostile.
Phishing remains the most prevalent attack method due to its relatively low cost and high success rate, and the advance of AI only furthers this problem, said Niall McConachie, regional director (UK & Ireland) at Yubico. He said: “Unfortunately, organisations aren’t doing enough to upgrade the cybersecurity tools and methods used to protect their staff and customers. As the rate of sophisticated phishing attacks continues to rise, Data Protection Day highlights the critical need for modern, phishing-resistant authentication from businesses and individuals to stay secure.
“It’s clear that traditional username and passwords are no longer sufficient for keeping data secure – but they unfortunately remain one of the most widely used forms of authentication globally. In fact, recent research** has found that 53 percent of employees still use usernames and passwords to authenticate business accounts, putting not only their personal data at risk of phishing attempts but also their organisations’. This can lead to significant reputational and financial damage.
“Basic username and password authentication alone is too easy for attackers to circumvent, allowing unauthorised access to online accounts and personal data. Once a password is stolen, cyber criminals can successfully bypass many forms of legacy multi-factor authentication (MFA) such as SMS-based one-time passcodes (OTPs).”

Just as GDPR set the new data privacy standard more than five years ago, GenAI regulation will establish standards for decades, according to Sylvain Cortes, VP Strategy at Hackuity. “If you cut through the latest investor buzzwords and media doom-and-gloom, the AI threat is simple: at its core, Artificial Intelligence amplifies our data (in)security.

“Wavestone’s CISO Radar 2024 highlights many of these emerging threats, from hijacking AIs to expose their inner secrets, to manipulating their data ingestion. But peel back the layers, and you’ll find that these attacks are often exploiting flaws that have existed in organisations’ architectures for years, now at unprecedented scale.

“AI’s a match to the current cyber wildfire, but does it deserve more blame than the kerosene we’ve been ignoring for more than a decade? That’s the sort of question legislation like the EU’s Artificial Intelligence Act and even less AI-centric regulation like DORA are seeking to answer and remediate.”

Steve Bradford, Senior Vice President EMEA at SailPoint, said: “Organisations need to get on the front foot with protecting their data – not wait to be led by government regulation or red tape. As more data is created, the attack surface grows.

“Ahead of regulation like NIS2 later this year, UK companies are making headway, but three-quarters still need to complete preparations to better protect themselves and their customers. As the threat landscape grows more sophisticated, the stakes have never been higher. The operational downtime, reputational damage, customer loss, and system restoration that follow any data breach can come at a huge cost for businesses. Protecting sensitive information and ensuring access is granted only to those who absolutely need it is essential.”

Charles Southwood, Regional Vice President, Northern Europe, Denodo said: “In an era where data is highly susceptible to unauthorised access and exploitation, there’s a growing concern when it comes to secure data handling. Although data often holds the key to enhancing operations, the sheer amount of data that organisations are expected to deal with on a daily basis can have its challenges, especially when it comes to safeguarding. Globally, data governance is becoming increasingly significant for businesses.”
Meanwhile the data services company Experian has released its 11th annual Data Breach Industry Forecast. Cybercriminals are continually working smarter not harder, said Michael Bruemmer, vice president, Global Data Breach Resolution at the firm. He said: “They are leveraging new technologies like artificial intelligence and applying their talents in different ways to be more strategic and stay a step ahead. Organisations should not ignore even the slightest security abnormalities and be more aware of what global interests may make them a target.”

To access the report, visit https://ex.pn/2024databreachindustryforecast.

Related News

  • Cyber

    Changing cause of data breaches

    by Mark Rowe

    The root cause of data breaches is shifting, writes Jon Fielding, Managing Director, EMEA, Apricorn, which offers encrypted portable and desktop drives,…

  • Cyber

    Know your risk

    by Mark Rowe

    Risk management has never been more critical, writes Nick Rafferty, pictured, co-founder and CRO of the GRC (governance-risk-compliance) platform SureCloud; nor more…