New figures released by law firm RPC claim the number of UK based retailers experiencing data breaches has nearly doubled within the last year.
Between 2015 and 2016, 19 breaches were reported to the information security watchdog, the Information Commissioner’s Office (ICO). However, between 2016 and 2017 that number climbed to 38 data breaches.
However, this increase was not caused by malicious activity by third parties. This increase is due in part to employee error, negligence, and malicious actions.
As the deadline for the General Data Protection Regulation GDPR inches closer, retail companies should expect to see harsh penalties for not complying and protecting sensitive customer data. Failing to comply with GDPR could result in fines of “up to €20 Million, or in the case of an undertaking, up to 4 % of the total worldwide annual turnover of the preceding financial year, whichever is higher”.
NNT will help you comply with the latest GDPR regulation by providing you with:
- Vulnerability Management – audit and assess systems for exploitable vulnerabilities
- System Hardening – ensure systems are hardened against attack/attack surface is minimized
- File Integrity Monitoring – change control to expose and validate all changes
- Automated Log Analysis – automated analysis of user and system activity for suspicious behaviors
- Least Privilege Access – ensure data access restrictions are enforced 24/7
- Data Encryption – by encrypting personal data, the damage from a breach can be limited
- Host Intrusion/Breach Detection – if the unthinkable happens, make sure you can shut it down
- Change Control – maintain security at all times even when inevitable changes are implemented
- Threat Intelligence – real-time analysis of changes using continuously updated threat intelligence
Read this article on InfoSecurity Magazine