{"id":1897,"date":"2011-02-14T07:00:46","date_gmt":"2011-02-14T15:00:46","guid":{"rendered":"http:\/\/www.formtek.com\/blog\/?p=1897"},"modified":"2011-02-14T07:00:46","modified_gmt":"2011-02-14T15:00:46","slug":"security-compliance-is-expensive-but-ultimately-saves-money","status":"publish","type":"post","link":"https:\/\/formtek.com\/blog\/security-compliance-is-expensive-but-ultimately-saves-money\/","title":{"rendered":"Security: Compliance is Expensive, but Ultimately Saves Money"},"content":{"rendered":"

The average cost of security compliance for a company is $3.5 million. \u00a0 That sounds high. \u00a0But a study by the Ponemon Institute <\/a>found that companies that haven’t made the upfront investment in security compliance end up on average paying three times more on security-related problems that they run into.<\/p>\n

Larry Ponemon, chairman and founder of the Ponemon Institute, said that\u00a0“most organizations are probably underfunding their compliance activities and they’re not measuring their non-compliance costs effectively. \u00a0They don’t really understand that if they did a better job on compliance, it can lead to a lower total cost of compliance.”<\/p>\n

The Ponemon study looked at the impacts of compliance costs and benefits as related to compliance regulations and standards. \u00a0They considered the payment card industry’s PCI-DSS standard and also HIPAA, European Union Privacy Directive,\u00a0and Sarbanes-Oxley. \u00a0The report recommends that when implementing compliance, organizations especially focus on meeting requirements for security compliance.<\/p>\n

Ponemon assigned a security effectiveness score (SES) to organizations to measure how well they have implemented security measures within their company. \u00a0 Organizations with high scores for SES typically had lower costs related to security non-compliance. \u00a0The report found that organizations that spent more on security compliance typically had smaller costs associated with non-compliance.<\/p>\n

Rekha Shenoy, vice president of strategy for Tripwire, the sponsor of the Ponemon report, said <\/a>that \u00a0“Organisations today are confronted by a growing number of compliance challenges and it can be extremely difficult from a resource perspective to address these concurrently. \u00a0However, businesses that invest in continuous monitoring and conduct frequent audits can drastically reduce the business and financial consequences associated with non-compliance. .. \u00a0There are not many differences among industries. They are all spending money for compliance, but they are not all getting secure. \u00a0It was the ones that invested in security practices that were reaping the benefits — those that focused on securing the business, rather than focusing on compliance alone… \u00a0”<\/p>\n

Shenoy said that \u00a0“the difference between companies that are improving and those that have a wider gap is likely executive leadership. \u00a0We see the common thread being the number of internal audits occurring\u2014which happens with executive support. So when the compliance dollars go toward investing in automated compliance and good security practices, the business reaps the benefits.”<\/p>\n

\"Digg<\/a><\/div>
\"Reddit<\/a><\/div>
\"Stumble<\/a><\/div>
\"Buzz<\/a><\/div>
\"Vote<\/a><\/div>
\"Share<\/a><\/div>
\"Bookmark<\/a><\/div>
\"Kick<\/a><\/div>
\"Shout<\/a><\/div>
\"Share<\/a><\/div>
\"Bookmark<\/a><\/div>
\"Post<\/a><\/div>
\"Google<\/a><\/div><\/div>","protected":false},"excerpt":{"rendered":"

The average cost of security compliance for a company is $3.5 million. \u00a0 That sounds high. \u00a0But a study by the Ponemon Institute found that companies that haven’t made the upfront investment in security compliance end up on average paying…<\/span><\/p>\n

Read more ›<\/a><\/div>\n

<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9,31],"tags":[],"class_list":["post-1897","post","type-post","status-publish","format-standard","hentry","category-compliance","category-security"],"_links":{"self":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/1897","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/comments?post=1897"}],"version-history":[{"count":0,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/1897\/revisions"}],"wp:attachment":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/media?parent=1897"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/categories?post=1897"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/tags?post=1897"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}