{"id":6466,"date":"2023-09-22T06:20:14","date_gmt":"2023-09-22T06:20:14","guid":{"rendered":"https:\/\/hoozoocomm.co.za\/dri\/?p=6466"},"modified":"2023-09-28T11:32:20","modified_gmt":"2023-09-28T11:32:20","slug":"compliance-not-a-compromise","status":"publish","type":"post","link":"https:\/\/hoozoocomm.co.za\/dri\/2023\/09\/22\/compliance-not-a-compromise\/","title":{"rendered":"Compliance is not a compromise"},"content":{"rendered":"[vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” overflow=”visible” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none”][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][divider line_type=”No Line” custom_height=”40″][vc_column_text]\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n

Data Privacy Day on 28 January is an international annual event that highlights the importance of data protection and compliance in a high-risk world. The World Bank describes it as an international focus on the \u2018importance of respecting privacy, safeguarding data and enabling trust\u2019. And it is important in the era of increasingly sophisticated cybercrime where online has become a complex web of tracking, cookies, crime and intent. According to Brendon Ambrose, General Manager and Data Privacy Lawyer at Atvance Intellect, companies in South Africa need to focus on maturing their data protection and compliance foundations to ensure that they are not only aligned with the Protection of Personal Information Act (POPIA), but that they can handle the ongoing cyber onslaught.<\/strong><\/span><\/p>\n

\u201cPOPIA has been in effect for a short while and most organisations are putting compliance processes in place, but there\u2019s still a lot of concern around how robust their processes are and whether or not they\u2019re fully prepared,\u201d he adds. \u201cAs international Data Privacy Day rolls in, and stories of doom and gloom and breach along with it, this is a good time for companies to focus on how they manage their security and alerts around a compromise.\u201d<\/p>\n

While POPIA comes with an extensive checklist, one area that\u2019s invaluable to the business is the notification of security compromises. According to IBM<\/a><\/strong>, it takes an average of 287days to discover and contain a data breach. This gives the attackers nearly a year to play around in the system, really building up that stickiness that allows them to steal credentials, data and information. Which makes early identification and mitigation absolutely critical as this can fundamentally change the impact that the attack has on the business, both in terms of cost and reputational damage.<\/p>\n

“Companies need to gain a solid understanding around how a security compromise is defined within the business, within POPIA, and when and how to report it,\u201d says Ambrose. \u201cThe last thing a company needs is to find out that it’s been hacked because information was leaked online, or a significant amount of personal information connected to the business was found online. It\u2019s essential that companies focus on embedding the right processes and hiring the right resources because the fall-out for failure is expensive and damaging.\u201d<\/p>\n

\n
\n
\n
\n
\n

The same IBM study found<\/a><\/strong> that the total average cost of a breach increased by 10% from 2020 to 2021, rising to $4.24 on average, and that lost business came to around 38% of the overall average at a cost of $1.52 million. In addition, 20% of the breaches were due to compromised credentials and companies that had low levels of compliance paid significantly more -$2.30 million more, to be precise. Which really does underscore the fact that compliance is not a compromise. It has to become a part of the organisation\u2019s culture, trickling down from the top into every department and onto every desktop.<\/p>\n

\u201cOne of the best ways to ensure that compliance remains a mandated priority within the business is to invest into training,\u201d says Ambrose. \u201cThere\u2019s the first line of defense training that ensures every employee understands their role in keeping the business, and its data, safe. Then there\u2019s ensuring that the company has a POPIA compliance officer who is regularly and rigorously trained so they\u2019re prepared for what the cybercriminal is about to throw at them.\u201d<\/p>\n

Understanding precisely how the organisation has to comply with, and report around, POPIA is essential in ensuring that it can emerge from an incident with minimal harm and risk. The reality is that every, single business that uses the internet is at risk of being hacked. Some recent research<\/a><\/strong> found that 64% of companies have been attacked at least once, 63% of attacks are about money, and there\u2019s an attack every 39 seconds. It doesn\u2019t matter how big or small your business is \u2013if it\u2019s online, has data and makes money, it\u2019s a target. In fact, 80% of companies<\/a><\/strong>that have been attacked once, will be attacked again.<\/p>\n

\u201cInvest into training and into processes and procedures that help the organisation to identify an incident and mitigate its impact,\u201d says Ambrose. \u201cEnsure your information officer or responsible compliance officer has the skills and tools they need to create a robust incident management plan and stay abreast of changes in security best practice and attack vector. This is not the time to minimise the resources given to security, not when the fallout is so significant.\u201d<\/p>\n

Ultimately, international Data Privacy Day is just that, one day, but it should underscore the importance of investing into skills, resources and systems that will ensure the business can withstand, or survive, a breach. At a time when customer trust is low, and government oversight is high, compliance is less a box ticking exercise and more an essential part of doing business.<\/p>\n

Get in touch with Atvance Intellect, experts in data privacy, data law, complianceand global best practice to ensure that your business doesn\u2019t just survive compliance, it leverages it for growth.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

\n
\n
\n
\n
\n
\n
\n
\n
CLICK HERE<\/span><\/span>\u00a0to connect with our expert<\/div>\n
<\/div>\n<\/div>\n<\/div>\n
\n
\n
\n
\n

Brendon Ambrose<\/strong><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n[\/vc_column_text][\/vc_column][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][divider line_type=”No Line” custom_height=”40″][\/vc_column][\/vc_row]\n","protected":false},"excerpt":{"rendered":"

The safeguarding and protection of data should not be a box ticking exercise<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-6466","post","type-post","status-publish","format-standard","category-articles"],"_links":{"self":[{"href":"https:\/\/hoozoocomm.co.za\/dri\/wp-json\/wp\/v2\/posts\/6466","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hoozoocomm.co.za\/dri\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hoozoocomm.co.za\/dri\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hoozoocomm.co.za\/dri\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/hoozoocomm.co.za\/dri\/wp-json\/wp\/v2\/comments?post=6466"}],"version-history":[{"count":6,"href":"https:\/\/hoozoocomm.co.za\/dri\/wp-json\/wp\/v2\/posts\/6466\/revisions"}],"predecessor-version":[{"id":7340,"href":"https:\/\/hoozoocomm.co.za\/dri\/wp-json\/wp\/v2\/posts\/6466\/revisions\/7340"}],"wp:attachment":[{"href":"https:\/\/hoozoocomm.co.za\/dri\/wp-json\/wp\/v2\/media?parent=6466"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hoozoocomm.co.za\/dri\/wp-json\/wp\/v2\/categories?post=6466"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hoozoocomm.co.za\/dri\/wp-json\/wp\/v2\/tags?post=6466"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}