75% of companies have been affected by an internal data breach incident

The survey, conducted by two companies: Kaspersky Lab and B2b International shows that 3 out of 4 companies have been affected by a breach of confidential company information. The survey indicated that 42% of employees were the most common cause of sensitive data loss, resulting in losses of PLN 320,000.

Threats

IT infrastructure today is extremely vulnerable. Virtually every day, security vulnerabilities arise, and advancing technology and upgrades make it necessary for IT staff to keep up with them. However, this is not always the case, and as a result, the company is exposed to not only external threats, but also internal ones – those coming from employees.

The price of information leakage

The survey, conducted on more than 5,000 business professionals. IT from around the world showed that one in five companies affected by such threats lost valuable data affecting the entire business. As a result of the data leak, the average financial losses incurred by small and medium-sized companies ranged from 188,000. PLN (intentional data leakage) to 320 thousand. PLN (accidental data leakage). In the case of large enterprises, the losses amounted to – PLN 3million and PLN 5 million, respectively.
What’s more, the survey shows that one in five employees lost a mobile device containing valuable corporate sensitive data at least once a year. Loss and theft of devices is the second worrying threat, after information leakage.

“It is no secret that a security solution alone is not enough to secure corporate data. This is confirmed by the results of the survey,” said Konstantin Voronkov, head of the division responsible for endpoint security products, Kaspersky Lab. “An integrated, multi-level approach supported by security data analysis and other complementary methods is needed. These methods may include the use of specialized solutions and the introduction of security policies, such as limiting access rights.”

Summary

Experts at Kaspersky Lab advise companies to use multi-level security against sensitive data leaks, as they minimize the risk of threats. Downplaying the issue of comprehensive IT infrastructure protection can prove very costly as a result of internal and external corporate data security incidents.

source: Kaspersky Lab