Financial services industry in 'turmoil'

Rush to embrace innovative technologies is creating new attack surfaces via cloud, IoT, mobile, blockchain, machine learning and AI.

  • 5 years ago Posted in
Thales says that digital transformation is driving turmoil among global financial services organisations and leaving sensitive data at risk, according to its 2018 Thales Data Threat Report, Financial Services Edition.

 

Digital transformation brings risk with reward

The financial services industry has hastily entered the digital transformation era, but this is not balanced with appropriate security measures. Almost two thirds (65%) of global financial services organisations have now suffered a data breach, with 28% having suffered a breach in the past year.

 

Every piece of information used to run a financial services business creates risk – financial data in accounts and investments, personal data on account holders. Add to that new technologies including cloud, containers, mobile payments, Blockchain, IoT, machine learning and AI – and while these might help meet the increased consumer and business demands for improved services and experience, the industry opens itself up to new avenues for attacks and breaches.

 

Cloud usage with sensitive data is especially high in the financial services industry at 76%. Multiple cloud usage is also high with 60% of organisations using more than 25 SaaS applications and 56% using 3 or more IaaS vendors. This creates a new problem of how to secure data across multiple cloud deployments.

 

Put the money where the risk is

Security spending is up but not aligning with the new risks. While 78% of global financial organisations report a spending increase on IT security, they are not spending in the right areas. The majority (72%) of IT security pros acknowledge data-at-rest defenses are most effective at protecting data, but only 38% registered a spending increase for those specific tools.

 

44% recognised encryption as the top tool required to increase cloud usage and half of respondents recongnise that managing encryption keys across multiple-cloud environments is a problem that needs to be solved.

 

Peter Galvin, chief strategy officer, Thales eSecurity says:
“Digital transformation as well as the increased number and sophistication of attacks, all combine to leave the data belonging to financial services organisations at risk. Encryption is proven to be the most effective technology to protect data, wherever it resides, as well as help meet compliance mandates. As new technologies such as cloud IoT and mobile payments are increasingly adopted by financial organisations looking for a competitive edge, the security risks they bring must be addressed.”
Research shows ‘game needs to be changed,’ with security innovation years behind that of the...
73% of organizations lack automated patch management, and 62% experienced incidents involving...
Quest Software has signed a definitive agreement with Clearlake Capital Group, L.P. (together with...
Dell EMC PowerProtect Cyber Recovery for AWS provides a fast, easy-to-deploy public cloud vault to...
Aqua’s cloud native application protection platform becomes the only solution that protects cloud...
54% of organisations working on a security transformation project now or in the next 12 months.
Node4 has released its Mid-Market IT Priorities Report 2021. The independent report reveals that...
Zscaler Zero Trust exchange cloud-based architecture enables superior green security capabilities...