In tough economic times like these, people do what they have to do to put bread on the table, and inevitably some of those people turn to criminal activity as a source of income.
Certainly, that occurred during the early years of the Great Depression, although the final decade of that dark period actually saw a reduction in crime. Nevertheless, a recent article in The Virginia Pilot noted that statistics generally point toward increased crime during recessions.
The crimes referred to here are property-related crimes, but the scenario today is more far-reaching and devastating than the simple theft of a bottle of milk in 1930. That's because the most valuable property many companies–particularly insurers–have is information in the form of electronic data.
The Computer Age has given us incalculable benefits in terms of speed and productivity, but it has also meant that even the smallest actions may be significantly magnified. The 1930s dairy that found itself missing a few bottles of milk undoubtedly took a miniscule financial hit, but the 2000s insurer that finds its data has been compromised and/or stolen risks serious consequences, even total ruin.
That's why it was with a great sense of unease that I read recently that financial and other factors may expose global financial institutions, including insurers, to an increased risk of data breaches. That's according to Deloitte Touche Tohmatsu's sixth annual survey of global financial institutions' information security efforts.
The survey cited "tighter budgets, a greater concern over internal security breaches due to lower employee morale, and complacency after a decrease in overall attacks over the past year" as the reasons for the elevated risk.
Let's take a look at those reasons. The good news when it comes to insurance IT budgets is that, overall, they are remaining flat or increasing slightly, at least according to Celent, Novarica and other industry analysts. The bad news, however, is that data security is nowhere near the top of insurers' technology concerns list.
Thus, while IT budgets may not be shrinking, there doesn't seem to be any urgency about taking additional measures to protect sensitive and highly valuable data.
Greater concern about internal security breaches due to lower morale is certainly warranted. Disgruntled employees and former employees have been known to wreak vengeance on their employers–and what better way of getting back at a company than stealing or compromising the data that is the firm's life blood?