IBM report details extended financial impact of data breaches

Calculating the actual return on an investment (ROI) of investments in cybersecurity is always going to be little tricky because an organization is essentially trying to assess how much they saved based on an event that didn’t occur. It may be possible to count the number of attacks launched against an organization that have been blocked. However, it’s not possible to determine how lethal or costly any of those attacks might have been if they had successfully been able to compromise the cybersecurity defenses in place.

The one that is apparent is the cost of a cybersecurity breach is rising. A new report from IBM finds the cost of a data breach has risen 12% over the past 5 years, which now on average costs $3.92 million. The report also notes that companies with less than 500 employees suffered losses of more than $2.5 million on average. Data breach costs in the U.S. are on average highest at $8.19 million, more than double the worldwide average.

Based on data collected by the Ponemon Institute on behalf of IBM, the report also reveals that 67% of the costs incurred by a data breach are realized within the first year. Another 22% are accrued in the second year, while the remaining 11% is incurred more than two years after a breach.

The survey does note, however, that organizations that have a dedicated incident response team that has been tested are able to consistently minimize the cost of a data breach. Organizations with an incident response team that also extensively tested their incident response plan experienced cost that were on average $1.23 million less than others, so clearly there is a demonstrable ROI that can be attributed to cybersecurity. The challenge cybersecurity teams face is gathering their own set of metrics to prove the case in t ..

Support the originator by clicking the read the rest link below.