According research by Kaspersky Lab to IT professionals worldwide, nearly half of businesses in the e-commerce/retail sectors (or online retailers ) (48%) and financial services (41%) may lose some type of financial information during duration of a year, either through targeted attacks, application vulnerabilities, or other forms of digital incidents.
Although both business segments share this similarity, their attitude towards security technology varies. As soon as the 53% of businesses in the e-commerce industry said they would "make every effort to have up-to-date anti-fraud measures," 10% lower than the world average. As the online business model is based on payment processing, this unwillingness to invest in measures against online fraud could cause damage in the event of a security incident.
The financial services sector adopts a more positive and proactive approach to protecting financial data. 64% of the businesses in the industry said they would "make every effort to have up-to-date anti-fraud measures." In addition, 52% of financial service providers said they wanted to implement new technologies to protect transactions, compared to 46% in the e-commerce / retail sector.
After a infringement
Kaspersky Lab investigates businesses that have experienced a serious data loss incident to describe the steps they have taken to protect their customers. Despite the different behaviors, both e-commerce and financial services have taken similar measures, implementing additional protection measures. The most common measure implemented was the "provision of secure connections for customer transactions". This measure was implemented by 88% of financial service providers and by 78% of e-commerce companies. On the other hand, financial services providers are more focused on proposals for specialized solutions for mobile devices in relation to e-commerce companies (75% versus 56% respectively).
Generally speaking, the last measure taken by both financial service providers and e-commerce companies following a data breach is free ή με έκπτωση παροχή premium εκδόσεων λογισμικού ασφάλειας στους πελάτες τους. Φαίνεται, λοιπόν, ότι και οι δύο τομείς είναι πιο πρόθυμοι να επενδύσουν στην προστασία των δικών τους συστημάτων, παρά να επενδύσουν στην ασφάλεια των συστημάτων των πελατών τους.
Finally, despite the relatively high rates of adoption of specialized anti-fraud solutions (71% in financial services and 62% in e-commerce), counter reading of these figures is remarkable. These figures show that about one third of businesses in both sectors still do not invest in financial security software, even after theft of financial information from them.
Recommendations
Security research shows that businesses that specialize in collecting and processing payment information are targeted by digital criminals. Kaspersky Lab's research shows that these businesses are most likely to lose data paymentthrough a data breach. Instead of taking actions after attacks, it is recommended to implement actions in advance to protect corporate networks, as well as secure payment systems with specialized solutions.
Companies should use a comprehensive security solution, such as Kaspersky Endpoint Security for Business, which helps comprehensively protect a corporate network from malicious digital attacks, phishing attempts, and other digital threats, while providing IT executives with a single, easy-to-use management console, providing visibility and control over security policies applied to a corporate network. Financial services also need specialized solutions, such as Kaspersky Fraud Prevention that protects customer terminals, including mobile devices. Kaspersky Lab's solution also offers a Software Development Kit to enhance the security of mobile banking applications. This anti-fraud security platform also includes Kaspersky Lab's threat intelligence services, which help raise employees' level of knowledge about digital threats.
For more information about Kaspersky Endpoint Security for Business and Kaspersky Fraud Prevention, you can visit the addresses www.kaspersky.com/business-security/ and http://www.kaspersky.com/business-security/fraud-prevention.
