I agree that “A common weakness among retailers that were hacked, for example, was a failure to implement two-factor authentication.” But not even the largest banks, like JP Morgan Chase,...
Continue Reading could avoid simple configuration errors. I think that we need to rethink our layers of security to prepare for future attacks. There are so many different ways savvy hackers can attack our data flow. Ponemon Institute published an interesting survey related to the recent spate of high-profile cyberattacks. According to the survey, database security was recommended by 49% of respondents, but the study found that organizations continue to allocate the bulk of their budgets (40%) to network security and only 19% to database security. Ponemon concluded, “This is often because organizations have traditionally spent money on network security and so it is earmarked in the budget and requires no further justification.” I found good news in a report that is addressing data security, by Gartner last month. The report analyzed solutions for data protection and data access governance and the title of the report is "Market Guide for Data–Centric Audit and Protection.” The report concluded, "Organizations that have not developed data-centric security policies to coordinate management processes and security controls across data silos need to act." I think it is time to rethink our security approach and be more data-centric. Ulf Mattsson, CTO Protegrity