Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Application Security

3/28/2019
02:20 PM
50%
50%

Enterprise Data Encryption Hits All-time High

A new report by the Ponemon Institute shows 45% of organizations have a comprehensive encryption policy in place.

More organizations are encrypting their data, according to a new study. The 2019 Global Encryption Trends Study just released by the Ponemon Institute found that use of encryption among enterprises has reached an all-time high.

While crime novels and mainstream news stories tend to focus on the dangers of hackers, the survey reports that IT executives fear sensitive data threats from employee errors (54% report this as their primary concern) more than fear external hackers (30%) and malicious insiders (21%) combined.

Organizations are responding to this worry by implementing enterprise encryption policies, with 45% of companies reporting that they have a comprehensive encryption policy in place. And the biggest challenge these companies face in implementing their encryption policy? Discovery, or just knowing what data exists that needs to be protected, is listed as the main challenge for 69% of those responding.

For more, read here

 

 

Join Dark Reading LIVE for two cybersecurity summits at Interop 2019. Learn from the industry's most knowledgeable IT security experts. Check out the Interop agenda here.

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Ritu_G
50%
50%
Ritu_G,
User Rank: Apprentice
4/11/2019 | 10:55:27 PM
It's the people's prerogative
You know what the scariest thing about hackers is not quite the company data, but the data of its customers. Losing some internal information can be easily rectified with little to no ramifications, but once people are  aware that their private details have been ripped off and tossed around, then you're REALLY in trouble!
RyanSepe
50%
50%
RyanSepe,
User Rank: Ninja
3/28/2019 | 3:40:36 PM
Security Department Catch All
Its great that data encryption is at an all-time high. And as long as best practice encryption methods are upheld this is a viable option when securing data. Facets such as key rotation and bit elevation once technological abilities increase need to be observed. Unfortunately, I feel many organizations use encryption as a catch all justification. "The device was lost... it's ok it was encrypted". Definitely a great step in the right direction, but also no reason to rest on our laurels. 
7 Truths About BEC Scams
Ericka Chickowski, Contributing Writer,  6/13/2019
DNS Firewalls Could Prevent Billions in Losses to Cybercrime
Curtis Franklin Jr., Senior Editor at Dark Reading,  6/13/2019
10 Notable Security Acquisitions of 2019 (So Far)
Kelly Sheridan, Staff Editor, Dark Reading,  6/15/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Building and Managing an IT Security Operations Program
As cyber threats grow, many organizations are building security operations centers (SOCs) to improve their defenses. In this Tech Digest you will learn tips on how to get the most out of a SOC in your organization - and what to do if you can't afford to build one.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-12865
PUBLISHED: 2019-06-17
In radare2 through 3.5.1, cmd_mount in libr/core/cmd_mount.c has a double free for the ms command.
CVE-2017-10720
PUBLISHED: 2019-06-17
Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that the desktop application used to connect to the device suffers from a stack overflow if more than 26 characters are passed to it as the Wi-Fi name. This application is installed o...
CVE-2017-10721
PUBLISHED: 2019-06-17
Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that the device has Telnet functionality enabled by default. This device acts as an Endoscope camera that allows its users to use it in various industrial systems and settings, car ga...
CVE-2017-10722
PUBLISHED: 2019-06-17
Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that the desktop application used to connect to the device suffers from a stack overflow if more than 26 characters are passed to it as the Wi-Fi password. This application is install...
CVE-2017-10723
PUBLISHED: 2019-06-17
Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that an attacker connected to the device Wi-Fi SSID can exploit a memory corruption issue and execute remote code on the device. This device acts as an Endoscope camera that allows it...