5 Data Security Trends Every Business Should be Aware of in 2016 and Beyond

Last year saw some of the biggest and most significant data breaches the world has ever seen.

One of the most publicised – and controversial – was the Ashley Madison hacking. The IBM and Ponemon Institute 2015 Cost of Data Breach Study put the average cost of a data breach at a huge $3.79m and predicted that figure would only grow with time.

This year has already seen serious threats to security, both to large organisations and smaller ones. Which means now, more than ever, businesses, IT professionals, and individuals must be vigilant when it comes to data protection.

Managing director of the Information Security Forum Steve Durbin believes 2016 to be the year of cyber risk.

He said: “As we move into 2016, attacks will continue to become more innovative and sophisticated. Unfortunately, while organizations are developing new security mechanisms, cyber criminals are cultivating new techniques to evade them.”

We agree. We’ve put together a list of the top five data security trends to be aware of through 2016 and beyond.

1. Cybercrime to shift towards smartphones

Cybercrime was, unsurprisingly, top of the list of threats in 2015. Wherever the money goes, crime will follow.

Online banking platforms have always been rife with security threats, but as the way we spend money shifts towards smartphones and touchless technology, you can be sure cybercrime will shift with it.

Mobile payment platforms, such as Google Pay and Apple Pay, make transferring money convenient for the user, but open up a new world of opportunity for hackers. If your organisation takes, or is planning to take, money in this way, investing in equally advanced security measures is essential.

2. The internet of things

Innovation doesn’t only lie in smartphones. Wearable technologies and the uprise in bring your own device (BYOD) to work policies mean that mobile apps for work will become more and more in demand.

In order for supply to meet that demand, we may see compromises being made when it comes to the security of these apps, in favour of lower costs and higher speeds of delivery.

While on the surface this might look win-win, lower quality apps with lower quality security will make it far easier for data to be attacked.

3. Spear phishing

Phishing is nothing new, but it works because it relies on trickery and human error. As falsely represented emails and websites become ever-more official looking, it’s more difficult for people to recognise whether they can trust a particular communication.

Spear phishing, which are targeted attacks, are on the rise. One click on a bad link can lead to the exposure of an entire database. Real-time monitoring systems are essential for organisations – particularly those with sensitive data.

4. Cloud services

Storing data in the cloud has many advantages (cost and systems space to name two), but it means relinquishing control of your data to a certain extent. Employees may be able to sidestep security policies or permissions which could put your data at risk.

IT teams should not only have total visibility of how cloud services are being used, they should also regularly check and verify the cloud service provider’s security meets standards.

5. Skills development

As the maturity and sophistication of cyber criminals increases, there is a real risk that the capabilities of those in IT teams won’t keep up, which makes recruiting the right staff essential.

Steve Durbin has said: “In 2016, I think we’re going to become very much more aware that perhaps we don’t have the right people in our security departments. We know that we’ve got some good technical guys who can fix firewalls and that sort of thing.

“But the right sort of people can make the case for cybersecurity being linked to business challenges and business developments. That’s going to be a significant weakness.

“Boards are coming to the realization that cyber is the way they do business. We still don’t have the joined up linkage between the business and the security practice.”

Hackers will always be looking for new ways to attack data, particularly as the technology landscape evolves. Organisations need to anticipate that and be proactive in their protection of data, rather than relying on old methods which aren’t robust or advanced enough to keep the criminals out.

High quality preventative measures might cost more upfront, but won’t cost anywhere near as much as it would take to repair the damage caused by a data breach.