Security Regulations & Guidelines:

Is Your Business on the Path to

Compliance?

Data is Exploding … and Privacy Regulations & Guidelines are

Expanding. We surveyed 460 IT professionals from countries around the world in

various industries to see how important security regulations and privacy guidelines were at their organizations.

Here are some of their answers. How does your organization stack up?

Information is Beautiful, but Data Breaches are Not

• 28 percent of organizations admit they have been hit by a data breach in the last 12 months.

• Data breaches are now a normal occurrence.

3

• 17 percent of this group only conduct internal audits to ensure regulatory compliance once a year.

• 3 percent say they only do so every two to three years.

Regular and Comprehensive Auditing is Crucial to Staying Compliant

4

Data Governance Is Gaining Favor Amidst Corporate IT

Security Priorities

• According to our study, 78 percent of organizations have a data governance program in place.

• Data governance is something that every organization should invest in.

5

Data Security Budgets are Increasing

• 73 percent of organizations allocate up to 15 percent of their IT security budgets towards regulatory compliance.

• These increased budgets can lead to: improved decision-making abilities, improved risk mitigation and improved brand protection.

6

Delayed Threat Detection and Breach Notifications Open Door to Regulatory Fines

7

Delayed Threat Detection and Breach Notifications Open Door to Regulatory Fines

• The upcoming EU GDPR requires organizations to notify regulatory authorities of a data breach within 72 hours.

• 14 percent of the surveyed IT professionals admitted it takes between one month and two years to notify regulatory authorities

• These organizations could face fines of €20 million, or 4 percent of their global turnover, whichever is greater.

8

9

Although C-Suite Interest in Data Protection is Increasing,

Visibility Proves Challenging

• 76 percent of C-suite and board-level executives regularly review and assess their organizations’ compliance with state, federal and international data protection laws.

• This is a step in the right direction.

However, they aren’t reviewing their organization’s plans enough.

• 12 percent of C-Suite execs say they only do such reviews every one to three years.

• 7 percent say they never do reviews.

• 11 percent admit that they• don’t know how often reviews are

done.

10

Want to see more stats and research?

Download the full study at: http://bit.ly/2grGuZC

11