Network Computing is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them. Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Survivor's Guide to 2007: Business Strategy: Page 6 of 9

Protection Racket

At the same time that IT is being asked to make information and services more flexible and open, they are also under considerable pressure to ensure the privacy of corporate data. Although it's difficult to estimate the full cost of a breach, earlier this year the FTC levied a $15 million fine against ChoicePoint, a data-aggregation company that was responsible one of the first widely publicized breaches of personal information. ChoicePoint exposed approximately 145,000 records, which comes to a per-record tally of about $103 from the fine alone. Other costs, such as lost business and the time and money spent notifying consumers and setting up free credit monitoring services, get added to that total.

It's no surprise then that data security is top of mind for many businesses. According to Ernst & Young's 9th Annual Global Information Security Survey, regulatory compliance and privacy protection will be the top two drivers of information security practices in the coming year. Unfortunately for IT, however, many of the mechanisms put in place to protect corporate data focused on external attacks, not privacy protection. According to the Ernst & Young survey, slightly less than 25 percent of companies interviewed have privacy projects under way.