Less than half of global executives believe GDPR compliance is relevant to their business, while a fifth admit they don't know - NTT Security Risk:Value report shows
Concerning numbers admit they do not know where corporate data is stored, or if all of their critical data is securely stored
LONDON, July 10, 2017 (GLOBE NEWSWIRE) -- Many global business decision makers are unaware of the implications of the forthcoming General Data Protection Regulation (GDPR), as well as other compliance regulations like PCI-DSS and ISO27001/2, with one in five admitting they do not know which regulations their organization is subject to. This is according to the 2017 Risk:Value report, commissioned by NTT Security, the specialized security company of NTT Group, which looks at attitudes to risk and the value of information security to the business.
The survey of 1,350 non-IT executives across 11 countries, reveals that just four in ten (40%) respondents globally believe their organization will be subject to the EU GDPR. Perhaps of most concern is the one in five (19%) who admit they don't know which compliance regulations they are subject to. In the UK, just 39% of respondents currently identify GDPR as a compliance issue, and 20% admit they don't know, while those outside of Europe are even less aware. Just a quarter of business decision makers in the US, 26% in Australia, and 29% in Hong Kong believe they are subject to the GDPR, despite the fact it will apply to any business holding or collecting data on European citizens.
Coming into force on 25 May 2018, the legislation leaves companies with less than a year to comply with strict new regulations around data privacy and security and could result in penalties of up to €20 million or 4% of global annual turnover, whichever is higher
With data management and storage a key component of the GDPR, the Risk:Value report also reveals that a third of respondents do not know where their organization's data is stored, while just 47% say all of their critical data is securely stored. Of those that know where their data is, fewer than half (45%) describe themselves as 'definitely aware' of how new regulations will affect their organization's data storage. Those in Financial Services & Banking and Computer Services & Technology are most likely to know where their data is stored and which compliance regulations they are subject to.
"In an uncertain world, there is one thing organizations can be sure of and that's the need to mark the date of 25 May 2018 in their calendars," according to Garry Sidaway, SVP Security Strategy & Alliances at NTT Security. "While the GDPR is a European data protection initiative, the impact will be felt right across the world for anyone who collects or retains personally identifiable data from any individual in Europe. Our report clearly indicates that a significant number do not yet have it on their radar or are ignoring it. Unfortunately many organizations see compliance as a costly exercise that delivers little or no value, however, without it, they could find themselves losing business as a result, or paying large regulatory fines."
Quantifying the threat - reputation, revenue and resignations
- One in eight respondents believe that poor information security is the 'single greatest risk' to the business. The most commonly reported risk is 'competitors taking market share' (28%).
- According to Risk:Value, 57% of decision makers believe a data breach is inevitable at some point.
- The impact of a breach will be two-fold, with respondents expecting a breach to affect their long-term ability to do business, together with short-term financial losses. More than half (55%) cite loss of customer confidence, damage to reputation (51%) and financial loss (43%), while 13% admit staff losses and 9% say senior executive resignations would impact them.
- The estimated cost of recovery, on average, has increased from $907,000 in 2015 to $1.35m in 2017.
- The estimated impact on revenue has decreased from 12.51% in 2015, but is still a significant 9.95%.
- Only just over half (56%) of decision makers report that preventing a security attack is a regular item on the board agenda, suggesting that more needs to be done to get it taken seriously at a boardroom level.
- Respondents estimate on average that only 15% of their organization's IT budget is spent on information security - although this figure has gone up from 13% in 2015 and 10% in 2014. Many report that they spend less on security than on R&D (31%), sales (28%), and marketing (27%).
The need to drive a culture of security
- 56% of business decision makers say their organization has a formal information security policy in place, up from 52% in 2015. Just over a quarter (27%) are in the process of implementing one - 1% have no policy or plans to implement one.
- However, while the vast majority (79%) say their security policy has been actively communicated internally, a minority (39%) says employees are fully aware of it. Germany and Austria (85%) are above average in communicating the policy, together with the US (84%) and the UK (83%).
- The percentage of respondents with an official information policy is unevenly distributed on a per-country basis. In Sweden the figure is just 30%, while in the UK, 72% claim an official policy. By sector, healthcare leads the way, with 69% of companies claiming an official information security policy. Finance comes a close second (66%).
- Less than half (48%) of organizations have an incident response plan, although 31% are implementing one. But just 47% of decision maker respondents are fully aware of what the incident response plan includes.
Download the 2017 Risk:Value report: www.nttsecurity.com/RiskValue2017 .
For additional Risk:Value resources: https://www.nttcomsecurity.com/en/templates/WideangleLandingPage.aspx?p=2875&pv=14629 .
Notes for editors:
Commissioned by NTT Security, the 2017 Risk:Value research was conducted by Vanson Bourne in March to May 2017. 1,350 non-IT business decision makers (35% at C-level) were surveyed in the US, UK, Germany and Austria, Switzerland, France, Sweden, Norway, Hong Kong, Australia and Singapore. Organizations had more than 500 employees and were selected across a number of core industry sectors. Approximately a third of responses came from the financial services sector.
About Vanson Bourne
Vanson Bourne is an independent specialist in market research for the technology sector. Our reputation for robust and credible research-based analysis, is founded upon rigorous research principles and our ability to seek the opinions of senior decision makers across technical and business functions, in all business sectors and all major markets. For more information, visit www.vansonbourne.com.
About NTT Security
NTT Security is the specialized security company of NTT Group. With embedded security we enable Group companies (Dimension Data, NTT Communications and NTT DATA) to deliver resilient business solutions for clients' digital transformation needs. NTT Security has 10 SOCs, seven R&D centers, over 1,500 security experts and handles hundreds of thousands of security incidents annually across six continents.
NTT Security ensures that resources are used effectively by delivering the right mix of consulting and managed services for NTT Group companies - making best use of local resources and leveraging our global capabilities. NTT Security is part of the NTT Group (Nippon Telegraph and Telephone Corporation), one of the largest ICT companies in the world. Visit nttsecurity.com to learn more.
For further information, contact Press Office, t. email@example.com or visit www.nttsecurity.com.
The issuer of this announcement warrants that they are solely responsible for the content, accuracy and originality of the information contained therein.
Source: NTT Security (UK) Ltd via Globenewswire
Följ NASDAQ OMX
Skriv in din e-postadress så får du ett mejl när vi har något nytt att berätta.
Senaste pressmeddelandena från NASDAQ OMX
Abiomed Receives FDA PMA Approval for Impella RP® for Right Heart Failure21.9.2017 00:23 | Pressmeddelande
DANVERS, Mass., Sept. 20, 2017 (GLOBE NEWSWIRE) -- Abiomed, Inc. (NASDAQ:ABMD), a leading provider of breakthrough heart support and recovery technologies, today announced it has received U.S. Food and Drug Administration (FDA) pre-market approval (PMA) for the Impella RP® heart pump. Culminating from five years of research, this approval follows the prior FDA Humanitarian Device Exemption (HDE) received in January 2015 and adds the Impella RP heart pump to Abiomed's platform of PMA approved devices. With this approval, the Impella RP heart pump is the only percutaneous temporary ventricular support device that is FDA-approved as safe and effective for right heart failure as stated in the indication: The Impella RP System is indicated for providing temporary right ventricular support for up to 14 days in patients with a body surface area greater than or equal to 1.5 m2, who develop acute right heart failure or decompensation following left ventricular assist device impl
Senegal and France to host Global Partnership for Education Financing Conference20.9.2017 23:00 | Pressmeddelande
NEW YORK, Sept. 20, 2017 (GLOBE NEWSWIRE) -- The Global Partnership for Education (GPE) is delighted that the governments of Senegal and France will co-host its financing conference, which will take place on February 8, 2018 in Dakar, Senegal. A photo accompanying this announcement is available at http://www.globenewswire.com/NewsRoom/AttachmentNg/d3003cff-ee20-409f-9729-9a9cef1d4d3e A video accompanying this announcement is available at http://www.globenewswire.com/NewsRoom/AttachmentNg/0a7eebb6-66b3-438b-904e-efeff83d94cf The announcement of the co-hosting was made by Presidents Macky Sall of Senegal and Emmanuel Macron of France at a high-level event on education financing held at the United Nations, which was attended by Secretary General António Guterres, several heads of state and leaders on global education. " The Global Partnership for Education has made substantial investments in education helpin
K2 Launches New Process Automation Platform Including New Cloud Service20.9.2017 18:00 | Pressmeddelande
K2's process automation platform allows businesses of all types around the globe to rapidly build and deploy automation across the business. BELLEVUE, Wash., Sept. 20, 2017 (GLOBE NEWSWIRE) -- K2 today announced the availability of its new low-code process automation platform - furthering innovation in the way organizations drive digital efficiencies. With a new managed cloud service, K2 Cloud, new on-premises version, K2 Five, and completely redesigned user interfaces and experiences, the platform helps businesses of all types around the globe rapidly deliver powerful process automation and realize business productivity gains. Automating business processes across an enterprise is crucial to the success of companies in the era of digital transformation. However, many initiatives are impacted by a lack of sufficient resources and the use of inefficient systems to manage processes. K2's low-code process automation platform solves these problems by enabling organ
8x8 and Aryaka Partner to Enhance Cloud Communications for Global Enterprises20.9.2017 16:43 | Pressmeddelande
Strategic Alliance will improve communications experience for business users worldwide SAN MATEO, Calif., Sept. 20, 2017 (GLOBE NEWSWIRE) -- Aryaka®, the leading global SD-WAN provider, and 8x8, Inc. (NASDAQ:EGHT), the world's first Communications Cloud provider, today announced that they are entering a strategic partnership that will improve the performance and reliability of business-critical cloud unified communications. This will enable global mid-market and enterprise companies to enhance business communications, collaboration and customer engagement for their employees, customers and partners around the world. Through this partnership, Aryaka's global SD-WAN solution will provide enterprise-grade private connectivity to further enhance the superior voice and video quality delivered by the 8x8 Communications Cloud(TM). When tested against several leading Unified Communications as a Service (UCaaS) providers, 8x8 was recently found by the Tolly Group to deliver the hi
NRT Technology Corp and Gaming Payments Innovator Sightline Payments Announce Merger20.9.2017 16:00 | Pressmeddelande
Combination Will Accelerate Innovation in Mobile, Data, Cashless Payments, and Provisional Credit Solutions to the Worldwide Integrated Resort Casino Industry LAS VEGAS, Sept. 20, 2017 (GLOBE NEWSWIRE) -- NRT Technology Corp. ("NRT") a leading provider of integrated ticket redemption and payment services to global casino operators, and Sightline Payments ("Sightline"), developers of the disruptive Play+ platform that's powering the next generation of cashless and mobile gaming payment solutions, announced today an agreement to merge. The company on closing will be named NRT Sightline and will form one of the largest pure play gaming payment technology companies in the world with an equity value of over $300 million. Following the closing of the transaction and subject to regulatory approvals, Sightline's CEO and Founder, Kirk Sanford, will assume the role of President and CEO of NRT Sightline. NRT's current Founder, P
BT and Hitachi Partner to Develop Industrial and Enterprise IOT Solutions20.9.2017 15:00 | Pressmeddelande
Initial Focus on Asset Intelligence and Predictive Maintenance Use Cases LAS VEGAS and LONDON, Sept. 20, 2017 (GLOBE NEWSWIRE) -- BT, one of the world's leading providers of communications services and solutions, and Hitachi Vantara, a wholly owned subsidiary of Hitachi Ltd. (TSE:6501) today announced a global partnership to co-create innovative solutions in the area of industrial and enterprise internet of things (IoT). The partnership aims to drive better business outcomes for global customers, including greater efficiency, productivity and cost savings. The companies will initially focus on exploring and designing asset intelligence and predictive maintenance solutions to deliver the desired outcomes for customers in industry sectors such as manufacturing and transportation. Announced at Hitachi's inaugural user conference, Hitachi NEXT 2017, in Las Vegas today, the partnership unites BT's global network infrastructure, cloud capabiliti
I vårt pressrum kan du läsa de senaste pressmeddelandena, få tillgång till pressmaterial och hitta kontaktinformation.Besök vårt pressrum