A voluminous increase in the number of data breaches is staggering. Whether it be a dating portal or the CIA website, data breaches are happening everywhere.  IT teams are struggling to keep such attacks at bay and as a result, sensitive enterprise and personal data is getting leaked into some unscrupulous hands.

The real question

Despite having many company assets and resources deployed in the field of cyber security, why is it that companies still fall prey to such data thefts? The problem is most often the complexity that the contemporary work environment brings. An entire business needs to be connected to the same network to run efficiently. This enables even outsiders to lurk into the insides of the business if they get hold of a proper channel. If even big organizations have failed to protect themselves from data leaks, then not much can be expected of smaller enterprises.

Present scenario

A survey of Forbes Global 2000 board directors and executives, by Georgia Tech Information Security Center, revealed that 63% of such executives are actively responding to cyber-security. This is a huge improvement from just 33% in 2012. The same survey also found that 53% of the boards formed a risk committee for proper identification and management of cyber-risks. Compare that to 2008 when only 8% of the boards had formed such bodies.

Organizations need to most focus on full engagement with the information security risks and challenges from both inside and outside of the organization. Slowly, organizations realize the importance of responding to such a situation in an intelligent manner.

How to respond?

Responding in the right manner is the key when you find someone stealing data from you. Rash responses to such incidents can turn the tides, and you may turn into a villain of the story. One must act nicely even when everyone is going against you. Wait for the right time and proper information to disclose the wrong deeds of the culprit.  Getting defensive will not help your case. Collect evidence and unfurl it only at the right time to expose the perpetrator.

Further, the organization must realize the time taken for any cyber-attack to complete and compare it with their current infrastructure’s capabilities of withstanding against such attacks. A cyber-attack has to pass through different stages, and a lot of variables are involved in the process. The critical stages involve compromise and data exfiltration. Ideally, such threats must be investigated and stopped as soon as they are detected. Any delay in averting such attacks may have catastrophic consequences.

The future

For the purposes of preventing the next data breach, it is important for companies to maintain constant supervision over their data. Further, resources must be employed in such a way that any malicious activity conducted becomes unprofitable. Making such activities unprofitable will force the hackers into moving onto an easier target. An automatic scanner must be employed in the networks which will monitor the activities of the network periodically and report any unusual activity.


Data breaches are one of the most common concerns that every organization in the world currently carries. Putting sensitive data online has positives as well as potential consequences. Organizations that realize that they too could be a victim of data theft are most well-equipped to deal with any adverse situation. A proper threat response technology which gives accurate alerts of any intrusion is essential. Further, a response strategy must always be in place in case of any data theft.

Swift and quick response are the key and organizations that can do it always have an upper hand.

It is important for all members of any organization to get professional cyber security training via experts in the field. Visit the course list page of SecureNinja to find out how you can get your company trained.