{"id":9312,"date":"2020-10-21T08:09:53","date_gmt":"2020-10-21T07:09:53","guid":{"rendered":"https:\/\/citysecuritymagazine.com\/?p=9312"},"modified":"2020-10-06T11:14:50","modified_gmt":"2020-10-06T10:14:50","slug":"protecting-your-data-in-the-covid-19-world","status":"publish","type":"post","link":"https:\/\/citysecuritymagazine.com\/cyber-security\/protecting-your-data-in-the-covid-19-world\/","title":{"rendered":"Protecting your data in the COVID-19 world"},"content":{"rendered":"

Protecting data in the COVID-19 world<\/span><\/h1>\n

Protecting personal data is now a top priority alongside physical measures needed to help people feel safe. How do you protect your reputation when their details are stolen from you?<\/p>\n

How much personal information would you be willing to give away for a pint and a bhaji?<\/p>\n

Suddenly, in the COVID-19 world in which we now live, surveillance and monitoring technology will be vital in helping to thwart the virus \u2013 and against our better natures we are being forced to give away basic details just to be able to do day-to-day activities such as visiting a restaurant or pub.<\/p>\n

The hooha around the adoption of the EU\u2019s General Data Protection Regulation (GDPR) in 2018 meant the public became far more aware of how their data could be used. Certainly, in the UK, the ever-increasing number of cyberattacks on organisations and individuals have given rise to a noticeable reluctance to share details because of concerns about security.<\/p>\n

Your data is valuable<\/h4>\n

Data is big business for hackers, particularly sensitive health information. According to CISCO\u2019s Benchmark Report 2020<\/a>, the number of organisations reporting reputational damage from data breaches has risen from 26% to 33% in the last three years. As we\u2019ve seen with high profile attacks, it is not so much the breach itself but the way in which it is handled that can rapidly turn it into a reputational and financial disaster.<\/p>\n

When Uber realised that hackers had accessed personal data of 57 million customers and drivers in 2016, they made the costly mistake of trying to cover it up. Instead of reporting it, they paid the hackers $100,000 to delete their ill-gotten gains and keep the breach quiet. Not only did this not work, it was against the law. They were fined \u00a3900k by the British and Dutch regulators and suffered a huge blow to their reputation.<\/p>\n

The GDPR allows you 72 hours to disclose the breach and fines are now much bigger. Last year British Airways faced a record \u00a3183m fine from the Information Commissioner\u2019s Office (ICO)<\/a>.<\/p>\n

In addition to losing trust in an organisation, outraged customers will be quick to go online and share their experiences with others. This in turn will attract negative press, impact brand value and result in customers going elsewhere. In Uber\u2019s case, their reputation suffered further when customers launched their #DeleteUber campaign and competitors were quick to challenge their marketplace lead.<\/p>\n

Acknowledge the risk of a cyberattack<\/h4>\n

Data breaches are occurring every day, and all of us \u2013 whether an individual, SME or global organisation \u2013 need to acknowledge that a cyberattack is almost inevitable. You will not only need IT solutions to protect the data; you also need a robust Crisis Media Strategy (CMS) to help protect your reputation.<\/p>\n

When sensitive data is stolen<\/h4>\n

All your staff should know what constitutes a breach and, as part of your Business Continuity Plan (BCP), should know what to do if there is one. They should also understand the need to communicate what is happening as quickly and truthfully as possible with the help of your CMS.<\/p>\n

A section on cyber breaches should have its own templates and procedures for communicating the incident internally and externally, as well as up-to-date contact details for all stakeholders and any external agencies that need to be alerted.<\/p>\n

It is vital that you are seen to care about your customers. Once you have contacted them, you need to immediately issue a public statement via your website explaining what has happened, what data has been affected and how you are handling it. Most importantly, you need to explain what customers should do to protect themselves.<\/p>\n

Your phonelines, network connections, software etc. can all be compromised in an attack, so make sure you have back-up lines of communication so that you can talk to those affected and they can talk to you. These can include using the press and social media.<\/p>\n

Monitor and respond as necessary to any negative online chatter to nip rumour and speculation in the bud. Your CMS should also detail how and when to respond to press inquiries; I recommend as soon as possible to avoid an information gap and ensure that you are the source of the most up-to-date details on the situation. Transparency goes a long way in the reputation stakes.<\/p>\n

Tips for the future<\/h4>\n

Review your BCP to ensure that new cyber risks from increased remote working, video conferencing, personal devices and Wi-Fi and use of corporate emails for social activities are thought through and explained to your staff.<\/p>\n

Communication is key to providing reassurance that your customers\u2019 data is safe:<\/p>\n