Taking Action to Protect Sensitive Data
Tuesday, March 6th, 2007Excerpt
In one form or another, human error is the overwhelming cause of sensitive data loss, responsible for 75 percent of all occurrences. User error is directly responsible for one in every two cases (50 percent) while violations of policy – intended, accidental and inadvertent – is responsible for one in every four cases (25 percent). Malicious activity in the form of Internet-based threats, attacks and hacks is responsible for one in every five occurrences (Figure 5).
Figure 5: Leading Causes of Data Loss

Table of Contents
Executive Summary
Key findings
Implication and analysis
Recommendations for action
Key Findings
Unconfirmed reports of sensitive data loss
Data loss results: confirmed losses of sensitive data
Which data are most sensitive?
Leading causes of data loss
The primary channels for sensitive data loss
Responding to the challenge of protecting sensitive data
Strategic actions to protect sensitive data
Better results: more frequent monitoring and measurement
Time allocated to protecting sensitive data
IT controls and sensitive data losses
Lost data: lost revenues, lost customers and additional expenses
Benefits of protecting sensitive data
Recommendations for action
Research methodology
Appendix
Figures and Tables
Eleven figures
Three tables