Pennies over people: The true cost to people when companies cheap-out on their security

The session is about the security risks faced when, risks that are not just for the company, but also its employees, customers, community, and country at large. 

Larger companies often go with the minimum requirements to meet compliance, either due to budget constraints or lack of industry experience. The main security issues arise when budgets have been increased or they don’t need to increase the budget and just continue with current setup instead of strengthening their security or trying to do new things with the old tools.

When this happens, businesses increase their security risk (and security appetite) and create additional security risk. Which endangers the companies, their data, employees, customers, and their vendors and suppliers, which can have a cascading effect for other companies.

SMB’s can be forgiven for crying budget when comes to their cyber security, because they don’t have the same financial resources/support, however, larger companies need to allocate more resources to anticipating problems instead of only planning for recovery.

The session also will have insights on:

• Current overview of how larger companies view cyber and don’t take it seriously until a major incident happens that makes it to the public
• How to best identify and report security issues before and audit &/or incident
• When sound the alarm
• How to turn a security audit into action
• How to identify and plan for sustainable growth
• How to work within the budget until the increase can be gained

​