Cybersecurity vs. GRC

With large data breaches making headline news nearly every week, cybersecurity is a hot topic.

Recently, AT&T discovered the personal information of more than 70 million current and former customers being sold on the Dark Web.

Compounding this is the fact that it takes on average nearly seven months for a corporate security and compliance team to even identity that a data breach occurred in the first place.

With the average cost of a data breach in the United States hitting $10 million per incident, companies are spending more than ever to defend against cyber attacks.

However, despite this, the number of data breaches happening today has never been higher.

In this episode of Privacy Files, we talk to Elvis Moreland, a Virtual Chief Information Security Officer at Blue Cyren. Elvis has an extensive background helping some of the largest companies in the world with their cybersecurity, and Governance, Risk and Compliance (GRC) strategies.

We talk a lot about the importance of implementing strong GRC frameworks and how cybersecurity tools alone are not enough to protect people, systems and data.

With the recent AT&T and Change Healthcare data breaches making the news, we analyze what happened and how these can be prevented in the future.

Elvis also talks about the risks of not conducting the proper due diligence during mergers and acquisitions, and how this can significantly increase a company's exposure to a data breach.

Overall, Elvis provides great insight into how corporations approach cybersecurity and GRC, and how his decades of experience has impacted the way he handles his own personal data.

Links Referenced:

https://www.mckinsey.com/capabilities/risk-and-resilience/our-insights/cybersecurity/new-survey-reveals-2-trillion-dollar-market-opportunity-for-cybersecurity-technology-and-service-providers

https://www.statista.com/statistics/273550/data-breaches-recorded-in-the-united-states-by-number-of-breaches-and-records-exposed/

https://www.varonis.com/blog/data-breach-statistics

https://www.npr.org/2024/03/30/1241863710/att-data-breach-dark-web

OUR SPONSORS:

Anonyome Labs - Makers of MySudo and Sudo Platform. Take back control of your personal data. www.anonyome.com

MySudo - The world's only all-in-one privacy app. Communicate and transact securely and privately. Talk, text, email, browse, shop and pay, all from one app. Stay private. www.mysudo.com

MySudo VPN - No personal information required to sign up. You don't even need a username and password. Finally, a VPN that is actually private. https://mysudo.com/mysudo-vpn/

Sudo Platform - The cloud-based platform companies turn to for seamlessly integrating privacy solutions into their software. Easy-to-use SDKs and APIs for building out your own branded customer apps like password managers, virtual cards, private browsing, identity wallets (decentralized identity), and secure, encrypted communications (e.g., encrypted voice, video, email and messaging). www.sudoplatform.com