Clients kept in the dark over data breaches, says survey
Logica survey reveals only 40% of UK organisations whose data is breached tell clients
LONDON – A survey conducted by IT and business services firm Logica reveals companies are failing to report data security breaches to clients. Some 60% of those who have experienced a data breach did not tell their clients and half failed to tell the police or authorities.
The study surveyed 300 public and private sector organisations in the UK over the past two months. The findings revealed more than half (57%) of those surveyed have “no idea” or understanding of the impact of a security breach on their business or organisation. A continued lack of engagement with the issue is evident, with just 16% of firms having a value-at-risk profile for information assets they own or control. Half of respondents believe security is solely an issue for the IT department.
Tim Best, director of enterprise security solutions at Logica, says: “Data losses put customers at risk and can lead to large contracts being withdrawn. With some organisations failing to disclose security breaches, this complacent attitude not only increases the likelihood of financial and reputational consequences but also highlights the inadequate security policies and protocols that UK organisations have in place. It is time to take action – it should be mandatory for all organisations to report significant breaches of confidential personal information to the Information Commissioner or their regulatory body. Only through mandatory reporting will the scale of the problem be understood, which will lead to the correct solutions being applied.”
The study also demonstrated many organisations lacked awareness of how to securely manage data and how to prevent a security breach. Only 30% were found to educate staff in IT security and information-handling procedures on a regular basis and less than a third employ a specific security incident response team. The survey also revealed that, while 63% of those surveyed hold personal data subject to EU data-handling regulations, only a quarter comply with ISO 27001/2, meaning companies are not adhering to security procedures when storing personal data.
Only users who have a paid subscription or are part of a corporate subscription are able to print or copy content.
To access these options, along with all other subscription benefits, please contact info@risk.net or view our subscription options here: http://subscriptions.risk.net/subscribe
You are currently unable to print this content. Please contact info@risk.net to find out more.
You are currently unable to copy this content. Please contact info@risk.net to find out more.
Copyright Infopro Digital Limited. All rights reserved.
You may share this content using our article tools. Printing this content is for the sole use of the Authorised User (named subscriber), as outlined in our terms and conditions - https://www.infopro-insight.com/terms-conditions/insight-subscriptions/
If you would like to purchase additional rights please email info@risk.net
Copyright Infopro Digital Limited. All rights reserved.
You may share this content using our article tools. Copying this content is for the sole use of the Authorised User (named subscriber), as outlined in our terms and conditions - https://www.infopro-insight.com/terms-conditions/insight-subscriptions/
If you would like to purchase additional rights please email info@risk.net
More on Risk management
Buy side would welcome more guidance on managing margin calls
FSB report calls for regulators to review existing standards for non-bank liquidity management
Japanese megabanks shun internal models as FRTB bites
Isda AGM: All in-scope banks opt for standardised approach to market risk; Nomura eyes IMA in 2025
Benchmark switch leaves hedging headache for Philippine banks
If interest rates are cut before new benchmark docs are ready, banks face possible NII squeeze
Op risk data: Tech glitch gives customers unlimited funds
Also: Payback for slow Paycheck Protection payouts; SEC hits out at AI washing. Data by ORX News
The American way: a stress-test substitute for Basel’s IRRBB?
Bankers divided over new CCAR scenario designed to bridge supervisory gap exposed by SVB failure
Industry warns CFTC against rushing to regulate AI for trading
Vote on workplan pulled amid calls to avoid duplicating rules from other regulatory agencies
Top 10 op risks: change brings challenges as banks splash the cash
Higher interest margins and a trend toward insourcing drive major tech projects
Top 10 op risks: deepfakes drive rise in fraud fears
External fraud re-enters top 10 as artificial intelligence provides new tools for criminals
Most read
- Top 10 operational risks for 2024
- Top 10 op risks: third parties stoke cyber risk
- Japanese megabanks shun internal models as FRTB bites