Archive for March, 2007

Taking Action to Protect Sensitive Data

Tuesday, March 6th, 2007

Excerpt

In one form or another, human error is the overwhelming cause of sensitive data loss, responsible for 75 percent of all occurrences. User error is directly responsible for one in every two cases (50 percent) while violations of policy – intended, accidental and inadvertent – is responsible for one in every four cases (25 percent). Malicious activity in the form of Internet-based threats, attacks and hacks is responsible for one in every five occurrences (Figure 5).

Figure 5: Leading Causes of Data Loss

Table of Contents

Executive Summary
Key findings
Implication and analysis
Recommendations for action

Key Findings
Unconfirmed reports of sensitive data loss
Data loss results: confirmed losses of sensitive data
Which data are most sensitive?
Leading causes of data loss
The primary channels for sensitive data loss
Responding to the challenge of protecting sensitive data
Strategic actions to protect sensitive data
Better results: more frequent monitoring and measurement
Time allocated to protecting sensitive data
IT controls and sensitive data losses
Lost data: lost revenues, lost customers and additional expenses
Benefits of protecting sensitive data

Recommendations for action

Research methodology

Appendix

Figures and Tables
Eleven figures
Three tables