8 Ways A Data Security Breach Is Like A Car Accident
A Data Security Breach is a lot like a car accident. You’re about to see how.
I was on my way to an appointment, driving the New Jersey Turnpike when we were stopped due to an accident at exit eight. This happens to be the exit that I had to take. The accident, a cement mixing truck overturned and wet cement spilled over the highway. As you can imagine, the sixteen mile backup built quickly and eventually people exited their vehicles to stretch and look around. As it turns out, I sat exactly one mile (thank you GPS) from the exit for just under two hours.
Data Security Breach & Car Accidents:
- Stops everyone in their tracks
- Breach: Interrupts business as usual
- Accident: Creates heavy a volume of traffic
- Creates a mess
- Breach: Data, Reputation
- Accident: Debris
- May require third-party assistance to help clean up
- Breach: Information Security Assessment company
- Accident: Cleaning company
- Creates chatter
- Breach: News and conversation
- Accident: Rubbernecking and onlookers
- May seek third-party assistance to prevent future incidents
- Breach: Database Security Roadmap
- Accident: Highway and traffic design company
- It takes time to resolve
- Breach: In Sony’s case, it was about one month before the PlayStation Network was back online
- Accident: As I stated previously, I was sitting for two hours
- It takes a lot of man power to clean up
- Breach: Sony hired someone new, an Application Security specialist, to diagnose and fix found vulnerabilities.
- Accident: There were at least four police cars, highway crew and two bulldozers to clean up the mess.
- May require an investigation if the impact is notable
- Breach: How severe was the breach? Was confidential information accessed? Was personally identifiable information stolen?
- Accident: How severe was the accident? Was there a fatality? Was someone at fault?
Now that I have shared my comparison, how would you compare a Data Security Breach to a car accident?
-Scott
Related Articles That Might Interest You
Best Practices for Firing A Network Security Administrator
Want to know how to fire a Network Admin? Need to know what precautions to take? Firing any employee can be a stressful event. Firing one who has significant knowledge of and privileged access to your Information Technology/Security infrastructure is even more stressful, as the risks are so notable.
Is ISO 27001 Right for (Y)our Organization?
Thinking about ISO 27001 Certification? View our free On-Demand ISO 27001 Webinar
- How to deal with increasing threats
- How to manage multiple regulatory requirements
- How to handle client requests for attestation
- To validate that significant changes did not have unanticipated results
Download: Information Security Attestation Guide
A Best-Practices Guide to Information Security Attestation
Download our proven Information Security Guide to simplify the process of protecting your data, proving you’re secure and growing your business.
Free Whitepaper: Five Best Practices for SIEM
The promise of SIEM is the consolidation of all relevant Security Event Logs from disparate sources into a single unified and normalized data store.
Free Download: A Best Practices Guide to Database Security
Because data is only as secure as the systems & processes it relies on – a holistic approach to data security is essential. This roadmap is not meant to be exhaustive but rather to stimulate the necessary thought process to put you on the path to good data security.
Free Download: ISO 27001 Implementation Roadmap
Have no fear – our “roadmap” will guide you, step by step, through the entire ISO 27001 process.
Getting to ISO 27001 certification is a process made up of things you already know – and things you may already be doing!
Free Whitepaper: Stop Wasting Money on Penetration Testing
Penetration Testing is most frequently performed to:
- Substantiate the net effectiveness of a mature control environment
- Prove to a third party that an environment is secure/trustworthy
- Quickly assess the security of a less mature control environment (in a sense a technical risk assessment)
- To validate that significant changes did not have unanticipated results
Risky Business Blog
Simplified Blog
Techno Blog
In The News
RSS Feed
About the Author:
Marketing at Pivot Point Security