2017数据泄露成本研究（英文版）_33页_2mb

2017 Cost of Data Breach Study Summary

Core Content

The 2017 Cost of Data Breach Study: Global Overview conducted by Ponemon Institute and sponsored by IBM Security analyzed data breach costs across 11 countries and two regions (United States, Germany, Canada, France, the United Kingdom, Italy, Japan, Australia, the Middle East, Brazil, India, South Africa, and ASEAN). A total of 419 organizations participated in the study, with over 1,900 interviews conducted to gather insights on breach size, root causes, response times, and associated costs.

Main Findings

Global Cost Trends

• The global average cost of a data breach decreased by 10% to $141 per compromised record.
• The per capita cost decreased by 2.9%.
• The average total cost increased by 1.8% due to larger breaches.
• The abnormal churn rate (unexpected customer loss) remained unchanged at 2.9%.

Country-Specific Insights

• United States had the highest per capita cost at $225, and the highest total organizational cost at $7.35 million.
• Canada had the lowest per capita cost at $190 and the lowest total organizational cost at $4.94 million.
• South Africa, India, and Brazil had the highest probability (41%) of experiencing a data breach involving 10,000 or more records in the next 24 months.
• Germany and Canada had the lowest probability (14.5%) of a data breach.
• Brazil and India had the lowest total organizational costs at $1.52 million and $1.68 million, respectively.

Cost Components

• Direct costs include forensic investigations, legal fees, identity protection services, and customer discounts.
• Indirect costs include lost customer goodwill, churn, and internal resources spent on response.
• Notification costs were highest in the United States at $0.69 million and lowest in India at $0.02 million.
• Post-breach response costs were highest in the United States and the Middle East, at $1.56 million and $1.43 million, respectively.

Key Factors Influencing Cost

Breach Size

• The more records lost, the higher the cost.
• Breach size ranged from 2,600 to over 100,000 records.
• Average total cost ranged from $1.9 million (for breaches <10,000 records) to $6.3 million (for breaches >50,000 records).

Response Time

• Faster identification and containment reduce breach costs.
• The mean time to identify (MTTI) was 191 days, and the mean time to contain (MTTC) was 66 days.
• Malicious or criminal attacks had the longest response times (MTTI: 214 days, MTTC: 77 days).
• Human error had the shortest response times (MTTI: 168 days, MTTC: 54 days).

Root Causes

• Malicious or criminal attacks were the most common cause (47% of breaches), with an average cost of $156 per record.
• System glitches and human error were the next most common causes (28% and 25%, respectively), with average costs of $128 and $126 per record.
• Malicious attacks are more costly than other causes.

Cost Reduction Strategies

• Incident response (IR) teams reduced costs by $19 per record.
• Extensive use of encryption reduced costs by $16 per record.
• Appointment of a Chief Privacy Officer (CPO) reduced costs by $3 per record.
• Security analytics reduced costs by $7 per record.

Cost Increase Factors

• Third-party involvement increased costs by $17 per record.
• Cloud migration during a breach increased costs by $14 per record.
• Extensive use of mobile platforms and compliance failures increased costs by $9 and $11 per record, respectively.

Industry Differences

• Healthcare had the highest per capita cost at $380.
• Financial services had an average cost of $245.
• Media, research, and public sector had the lowest per capita costs at $119, $101, and $71, respectively.

Implications for Organizations

• Investing in security technologies such as encryption, security analytics, and threat intelligence sharing helps reduce breach costs.
• Having a CPO or CISO improves customer retention and reduces churn, which lowers overall costs.
• Compliance failures and mobile platform usage increase breach costs.
• Customer churn has a significant impact on total costs, with organizations losing 4% or more of their customer base paying $5.1 million on average.

Conclusion

Organizations in Australia, Germany, France, and the UK were most successful in reducing breach costs, while those in the Middle East, the U.S., and Brazil faced higher costs due to larger breach sizes, higher churn rates, and increased complexity in IT environments. The study highlights the importance of proactive security measures, incident response capabilities, and customer trust initiatives in mitigating financial consequences of data breaches.