[2/2] Cost of a Data Breach Report 2024: implications

Continuing the overview of IBM’s Cost of a Data Breach Report 2024, here are the conclusions I would take into security and management decisions.

• Financial pressure is increasing. Rising breach costs put pressure on businesses. Organizations should account for these risks in financial planning and security budgets.

• Security affects competitiveness. When companies pass breach costs on to customers, investment in cybersecurity can help them keep prices lower. This offers another way to think about the return on security investment.

• AI deserves attention in security workflows. The reported savings associated with AI suggest that organizations should evaluate these tools in their security processes. AI is already being adopted throughout the software development life cycle; security is part of that shift too.

• Credential protection should be a priority. Breaches involving stolen credentials take the longest to identify and contain. Password protection and multi-factor authentication deserve particular attention.

• Data governance belongs in the security strategy. Shadow data highlights the need to identify and classify information held outside managed systems. Better data management also supports effective use of machine learning and AI.

• Recurring incidents create recurring costs. IBM Security’s Kevin Skapinetz describes a cycle of breaches, containment, and response. Businesses then invest in stronger defences and may pass the resulting costs on to customers.

My conclusion: cybersecurity is a business concern as well as a technical one. It affects financial resilience, pricing, and competitiveness, so decisions about security investment belong in the wider business strategy.

#Security #Software #AI #SRE #Architecture #Management