pace with the criminals who threaten them," the report advised.
Companies often make their critical data available to management, employees, vendors and clients on a multitude of platforms, including high-risk platforms like mobile devices and cloud.
While nobody expects the benefits of technology to diminish, or for organisations to shrink their digital footprint, it's clear that with more data accessible on more platforms, valuable data will remain under attack, and that the cost of security breaches will continue to be steep, it said.
"Ultimately, cyber crime is not strictly speaking a technology problem. It is a strategy problem, a human problem and a process problem. After all, organisations are not being attacked by computers, but by people attempting to exploit human frailty as much as technical vulnerability," it said.
This is a problem which requires a response that is grounded in strategy and judgement about business process, access, authority, delegation, supervision and awareness—not merely tools and technologies, it added.