This Saturday, January 28, is Data Privacy Day, a day to commemorate and educate the need to safeguard against posting sensitive data online. The initial thought behind this holiday was to educate individuals about the dangers of posting sensitive personal information online that could then be used in identity fraud scams. It has since expanded to remind groups and businesses that providing too much sensitive information about their organizations can aid hackers in attacking their online systems.
It’s interesting to note that almost all companies take measure to secure their physical premises but often times do not invest enough money or resources to secure their data. As we have seen with the recent Zappos data breach fiasco, nothing erodes a company’s reputation faster than a data breach involving customers’ sensitive information.
The National Cyber Security Alliance, sponsor of Data Privacy Day, recommends that businesses assess their risks, monitor threats to their business, and draft and implement a cyber security plan.
These are all good things to undertake but I would also add that while performing all these tasks, make sure you are keeping in mind the data risks posed from within your organization. Data leaks by employees with privileged access to company and customer data is very common. Whether done accidentally or on purpose, these leaks can be damaging to an organization from both a reputation and legal standpoint.
Another area to keep an eye on for potential internal data leaks is social media. Many companies are taking the plunge into social media. Business-to-consumer companies have been operating in this space for some time now and more and more business-to-business companies are exploring this medium as well. While the benefits of operating a Facebook or Twitter account may result in a more loyal customer base and a boost to sales, the potential risks to hack attacks increases with providing too much company detail through social media outlets.
In closing, data is an enterprise’s most important asset and protecting it from both internal and external risks should be a top priority for all senior executives. Customer trust should always be paramount and protecting their sensitive personal information is the cornerstone of building that trust. There is no sense in locking the front door if a data breach has caused your customers to flee and you are already out of business.
What are your thoughts on Data Privacy Day? What solutions do you think will be most effective in promoting the values this holiday promotes? Share your thoughts below. You can also follow me on Twitter: @liebsoft or connect with me via LinkedIn.
