{"id":10022,"date":"2020-05-22T07:00:00","date_gmt":"2020-05-22T15:00:00","guid":{"rendered":"http:\/\/formtek.com\/blog\/?p=10022"},"modified":"2020-03-20T19:15:29","modified_gmt":"2020-03-21T03:15:29","slug":"security-recalibrating-how-the-risks-and-costs-of-cyber-breaches-are-estimated","status":"publish","type":"post","link":"https:\/\/formtek.com\/blog\/security-recalibrating-how-the-risks-and-costs-of-cyber-breaches-are-estimated\/","title":{"rendered":"Security: Recalibrating how the Risks and Costs of Cyber Breaches are Estimated"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Evaluating the risks and costs involved in security breaches may not follow the common rule-of-thumb calculations that are now commonly performed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.ibm.com\/security\/data-breach\">Ponemon and IBM<\/a> have published an annual report that estimates the costs inflicted on businesses that suffer data breaches.  Typically the costs are estimated as an average cost per record involved in the breach.  For 2019 the number that&#8217;s been used is $150 per breached record.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">But it&#8217;s not that simple, according to a new report by <a href=\"https:\/\/www.cyentia.com\/iris\/\">Cyentia<\/a>.  For example, the monetary costs borne by a small company was found to be very different than a large company.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The Cyentia report found that breaches were significantly more likely to be experienced by large companies &#8212; 25 percent of  Fortune 1000 companies would fall victim.  That compared to small businesses where only 2 percent were affected.  But the monetary effect on the businesses were significantly different.  A breach at a large company was well less than 1 percent of annual revenues to address, something which can fairly easily be overcome.  But breaches at small companies could account for as much as 25 percent of annual revenues.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Without good risk estimates, companies fly blindly.  <a href=\"https:\/\/www.linkedin.com\/in\/drwadebaker\/\">Wade Baker<\/a>, partner at the Cyentia Institute, <a href=\"https:\/\/www.darkreading.com\/risk\/new-study-calls-common-risk-figure-into-question\/d\/d-id\/1337350?_mc=NL_DR_EDT_DR_daily_20200320&amp;cid=NL_DR_EDT_DR_daily_20200320&amp;elq_mid=96381&amp;elq_cid=19995009\">said that<\/a> &#8220;s wildly overestimated view of the potential impacts of these cyber events will lead to wildly overspending to mitigate them, which will lose the confidence of the board in the long run. And we&#8217;ll lose the ability to have a real discussion and be taken seriously.&#8221;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.linkedin.com\/in\/davidseverski\/\">David Severski<\/a>, senior data scientist at Cyentia, <a href=\"https:\/\/www.darkreading.com\/risk\/new-study-calls-common-risk-figure-into-question\/d\/d-id\/1337350?_mc=NL_DR_EDT_DR_daily_20200320&amp;cid=NL_DR_EDT_DR_daily_20200320&amp;elq_mid=96381&amp;elq_cid=19995009\">said that<\/a> &#8220;a single cost-per-record metric simply doesn&#8217;t work and shouldn&#8217;t be used. It underestimates the cost of smaller events and overestimates large events.&#8221;<\/p>\n<div class=\"lightsocial_container\"><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/digg.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-recalibrating-how-the-risks-and-costs-of-cyber-breaches-are-estimated%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/digg.png\" alt=\"Digg This\" title=\"Digg This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.reddit.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-recalibrating-how-the-risks-and-costs-of-cyber-breaches-are-estimated%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/reddit.png\" alt=\"Reddit This\" title=\"Reddit This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.stumbleupon.com\/submit?url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-recalibrating-how-the-risks-and-costs-of-cyber-breaches-are-estimated%2F&amp;title=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/stumbleupon.png\" alt=\"Stumble Now!\" title=\"Stumble Now!\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/buzz.yahoo.com\/buzz?targetUrl=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-recalibrating-how-the-risks-and-costs-of-cyber-breaches-are-estimated%2F&amp;headline=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/yahoo_buzz.png\" alt=\"Buzz This\" title=\"Buzz This\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.dzone.com\/links\/add.html?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-recalibrating-how-the-risks-and-costs-of-cyber-breaches-are-estimated%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dzone.png\" alt=\"Vote on DZone\" title=\"Vote on DZone\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.facebook.com\/sharer.php?t=&amp;u=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-recalibrating-how-the-risks-and-costs-of-cyber-breaches-are-estimated%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/facebook.png\" alt=\"Share on Facebook\" title=\"Share on Facebook\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/delicious.com\/save?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-recalibrating-how-the-risks-and-costs-of-cyber-breaches-are-estimated%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/delicious.png\" alt=\"Bookmark this on Delicious\" title=\"Bookmark this on Delicious\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.dotnetkicks.com\/kick\/?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-recalibrating-how-the-risks-and-costs-of-cyber-breaches-are-estimated%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dotnetkicks.png\" alt=\"Kick It on DotNetKicks.com\" title=\"Kick It on DotNetKicks.com\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/dotnetshoutout.com\/Submit?title=&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-recalibrating-how-the-risks-and-costs-of-cyber-breaches-are-estimated%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/dotnetshoutout.png\" alt=\"Shout it\" title=\"Shout it\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.linkedin.com\/shareArticle?mini=true&amp;url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-recalibrating-how-the-risks-and-costs-of-cyber-breaches-are-estimated%2F&amp;title=&amp;summary=&amp;source=\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/linkedin.png\" alt=\"Share on LinkedIn\" title=\"Share on LinkedIn\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.technorati.com\/faves?add=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-recalibrating-how-the-risks-and-costs-of-cyber-breaches-are-estimated%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/technorati.png\" alt=\"Bookmark this on Technorati\" title=\"Bookmark this on Technorati\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/twitter.com\/home?status=Reading+https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-recalibrating-how-the-risks-and-costs-of-cyber-breaches-are-estimated%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/twitter.png\" alt=\"Post on Twitter\" title=\"Post on Twitter\" \/><\/a><\/div><div class=\"lightsocial_element\"><a class=\"lightsocial_a\" href=\"http:\/\/www.google.com\/buzz\/post?url=https%3A%2F%2Fformtek.com%2Fblog%2Fsecurity-recalibrating-how-the-risks-and-costs-of-cyber-breaches-are-estimated%2F\" target=\"_blank\"><img decoding=\"async\" class=\"lightsocial_img\" src=\"https:\/\/formtek.com\/blog\/wp-content\/plugins\/light-social\/google_buzz.png\" alt=\"Google Buzz (aka. Google Reader)\" title=\"Google Buzz (aka. Google Reader)\" \/><\/a><\/div><\/div>","protected":false},"excerpt":{"rendered":"<p>Evaluating the risks and costs involved in security breaches may not follow the common rule-of-thumb calculations that are now commonly performed. Ponemon and IBM have published an annual report that estimates the costs inflicted on businesses that suffer data breaches.<span class=\"ellipsis\">&hellip;<\/span><\/p>\n<div class=\"read-more\"><a href=\"https:\/\/formtek.com\/blog\/security-recalibrating-how-the-risks-and-costs-of-cyber-breaches-are-estimated\/\">Read more &#8250;<\/a><\/div>\n<p><!-- end of .read-more --><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[31],"tags":[],"class_list":["post-10022","post","type-post","status-publish","format-standard","hentry","category-security"],"_links":{"self":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/10022","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/comments?post=10022"}],"version-history":[{"count":1,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/10022\/revisions"}],"predecessor-version":[{"id":10023,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/10022\/revisions\/10023"}],"wp:attachment":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/media?parent=10022"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/categories?post=10022"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/tags?post=10022"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}