How data loss can occur?

By

image (forbes)


Whether your business has 100 customers or 1,000,000 protecting your data from various risks is a priority. Because a data loss is lethal.

A Data loss can change the course of your life. 

When sensitive information is exposed individuals, businesses, government can face huge complications. In the connected world no one is safe from hackers. Their weapon could be SMS, Bluetooth, an email or a website that will use a small vulnerability  in your phone or laptop to do a lager damage to you and your organization.‌

Most people are unaware of how modern security threats work, because they do not give it enough attention to information security.

So! What exactly is a data breach?

A data breach exposes confidential, sensitive, or protected information to an unauthorized person without permission. 

Data breaches happen due to weaknesses in technology and human actions weather intentional or not. We use many new digital devices with minimal security testing, and expose ourselves to hacking.

Data Breaches are not only resulted from an outside hacker, some attacks are caused by malicious insider. Loss of an unlocked laptop or external hard drive or a smart phone containing sensitive information can cause a data breach.


Most malicious data breaches result from cyberattacks given below.


Phishing

Brute Force Attacks

Malware


Phishing attackers deceive insiders to steal credential or access to sensitive data. 

Hackers use various software tools guess passwords to your systems or networks.

Malware make use of security flaws in your software or operating system to infect undetected and steal data.

The real damage of data breaches occur when a hackers steals and sells Personally Identifiable Information (PII) or corporate intellectual data for financial gain.

Data data breach can have a devastating effect on any organization. It can harm reputation and financial stability. Businesses like Facebook, Target, and Yahoo have been the victims of a data breach. 

Compromised data in government organizations, will result exposing highly confidential information on Military, Legal and Political activities. Hackers access to sensitive information critical infrastructure can pose a major threat to the citizens.

Data leaks can reveal personal information from banking information and credentials of individuals. Identity theft is a major threat to data breach victims.


Niranjan Meegammana 

Comments

Post a Comment

Popular posts from this blog

The 7 Layers of Cyber Security : Attacks on OSI model

By
Image
Source : wallarm The OSI network  communications model is made of  7 layers. Each layer  handles a specific process to enable reliable communication between two or more devices. When the Internet was designed, its focus was on ensuring of reliable communications. The challenges of communication security emerged later.  These 7 layers act like a chain of links. If one lnk breaks, the whole chain of communication breaks. Hence security threat can happen at any of the 7 layers.  These layers are named as Application, Presentation, Session, Transport, Network, Data link and Physical layer. The application layer is your email application, physical layer is your communication cable, and everything else is in between help you communicate. In abstract the application layer provides user interface, while presentation layer handle formating, encoding and encryption. The session layer manages connections. The transport layer handles segmentation, sequencing, and establishi...
Read more

Best Practices for secure Software Development

By
Image
image : OpenSense Labs Are you aware of the  Solarwinds attack in 2020? The hackers exploited software vulnerabilities of Orion IT monitoring and management software used by thousands of enterprises and government agencies. This hack triggered a larger scale supply chain incident which affected thousands of organizations, including the U.S. government. The attackers infliltrated the Solarwinds network, and infected the software used for Network monitoring before it shipped to customers.This insident and many more warn us on the importance of building secure software.  Secure software development is a methodology used for creating robust software by incorporating security practices into every stage of the software development life cycle (SDLC). It begins at planning stage before a single line of code is written, and continue through the life cycle. A bug fixing at implementation stage cost six times than fixing it during design stage. Every new feature added, may carry series o...
Read more

ISO 27001 ISMS in a Nutshell

By
Image
Image : ISO The ISO 27001 certification is the most comprehensive  information security standard recognized globally. It ensures standardizing of your organisation's information security strategies to ensure confidentiality, integrity and availability of your systems and data to conduct your business effectively.  Gaining the certification is a journey with several milestones. It is a carefully planned systematic activity that transforms an organisation to a secure entity,  where everyone becomes a stakeholder in information security. Follow this processes to get to your goal successfully. Step 1. Obtain Management Support . This is the most critical requirement to achieve ISO 27001 status. Your ISMS project will definitely fail if it does not receive to management support. The management should provide, people, money and strategic direction for your ISMS to be a success story. In the sections below you’ll find some tips on how to convince your management, and how much th...
Read more