Cyber Security Blind Spots

(Treasury and Risk, February 2012)

In Brief: Don’t neglect these aspects of cyber security, this writer says: mobile device threats, access rights and privileges, encryption, a required second authentication over and above a simple user name and password, and preparation for a breach.

Our View: Leading companies plan in advance for potential breaches by developing a taxonomy to establish appropriate controls and response plans; drafting policies, including formal investigation procedures; creating a breach response management team to enable faster action; and conducting data breach ‘rehearsals’ to identify critical process gaps and ensure cross-functional coordination.