Costs and Benefits of Privacy Compliance
The costs and benefits of investing in information security seem to be a popular topic.
In January, I mentioned two new reports on the benefits of building in application security — Secure Application Development - A Preventative Approach That Pays and Secure SDL Positive ROI Possible. Another report by the Ponemon Institute looks at the cost of compliance with information privacy-related legislation, regulation and policies, and the cost of non-compliance.
The True Cost of Compliance is the result of a survey of 45 US organisations from a range of sectors. While perhaps less relevant to readers of this blog, it's worth a glance. The results of the survey, and similar ones, need to be taken in the context of the warning on page 27:
The purpose of this study is descriptive rather than normative inference. The current study draws upon a representative, non-statistical sample of data centers, all located in the United States. Statistical inferences, margins of error and confidence intervals cannot be applied to these data given the nature of our sampling plan.
Although it's good to have access to data like this, the numbers presented seem to have rather over-optimistic precision. Generally though, the findings might be what you would guess (read the report!).
See also the related Ponemon 2011 update on cost of a data breach.
Posted on: 25 March 2011 at 07:54 hrs
Comments are filtered automatically and should appear shortly after they been checked.