|
Business Benefits
The DTI found that overall approximately a third of UK businesses said that the source of their worst security incident was internal.
Spending on Internal Penetration Testing is a long-term value business investment. The benefits go beyond the immediate problem of breach avoidance and information loss. The MWR InfoSecurity Internal Penetration testing service is designed to enable the improvement of the IT environment. As well as thoroughly testing your networks for internal access and attack routes we ensure that they are configured for best performance. Therefore, long after any testing and remedial work is complete your organisation will benefit from faster performance, reduced downtime and increased service availability.
Business Risks
Overall cost of a company's worst incident in the last year
Direct Costs of a security incident |
Overall |
Large Businesses
(10,000+ employees) |
Loss of assets, regulatory fines etc. |
e.g. DPA £5k max fine for a conviction in the Magistrates Court and unlimited fines for convictions in the Crown Court |
e.g. DPA £5k max fine for a conviction in the Magistrates Court and unlimited fines for convictions in the Crown Court |
Indirect Costs of a security incident |
Overall |
Large Businesses |
Business Disruption |
£6,000 - £12,000
over 1- 2 days |
£50,000 - £150,000
over 1- 2 days |
Time spent responding to incident |
£600 - £1,200
2- 4 man- days |
£1,75- - £3,500
5 - 10 man- days |
Direct cash spent responding to incident |
£1,000- £2,000 |
£3,500 - £5,000 |
Direct financial loss (e.g. loss of assets, fines etc.) |
£500 - £1,000 |
£3,500 - £5,000 |
Damage to Reputation |
£100 - £400 |
£5,000 - £10,000 |
Total cost of worst security incident |
£8,000 - £17,000 |
£65,000 - £130,000 |
DTI & PwC "Information security breaches survey 2006"
|
