2022年7月29日

一項針對1000名軟件開發人員和初創公司員工的新研究發現，29%的公司在測試環境中測試和排除公司軟件故障時使用不受保護的生產數據(真實的客戶數據)，這增加了數據泄露的風險。根據Tonic.ai的說法，未受保護的生產數據被定義為未去識別或未合成的數據。該研究發現，45%的受訪者表示，他們的公司在過去五年內遭遇過重大數據泄露，部分原因是在不安全的環境中使用數據。在過去五年中，受數據泄露影響最嚴重的行業是金融服務(60%)、建築(57%)、教育(54%)、食品和飲料(53%)和法律實踐(53%)。根據受訪者的說法，數據泄露最常見的原因是內部盜竊(34%)、意外泄露(27%)和黑客事件(24%)——所有這些事件平均需要4周時間才能恢複。數據泄露為遭遇數據泄露的公司打開了潘多拉的風險盒子:受訪者表示，他們的業務遭遇了保險費上漲(28%)、民事訴訟(27%)、監管罰款(22%)和媒體尷尬(21%)。大多數曾經遭遇過數據泄露的人(88%)表示，這導致公司運作能力延遲。研究還發現，74%的人每天都會出於多種目的使用敏感的客戶數據。使用敏感客戶數據最多的行業是教育(83%)、金融服務(82%)、食品和飲料(80%)和建築(79%)。七成(71%)的受訪者表示，被黑客攻擊是他們公司的一個主要問題，這也是75%的企業確保客戶數據安全是“頭等大事”的主要原因。“隨著遠程工作的日益普及，數據泄露和泄露的增加是不可避免的。” Whether it be stolen work laptops, using real customer data in testing, or the incorrect cloud migration of data, there are a myriad of reasons why a breach can happen,” said Ian Coe , CEO of Tonic.ai. “What’s important to understand is that while a breach may happen, there are ways to safeguard the data to ensure companies are not putting their customers’ information at risk.” The survey revealed one way to avoid customer data breaches is to monitor and protect the data businesses use in software testing environments. On a promising note, the study also found that 50% of businesses use data that has been de-identified or synthesized to look like customer data, in testing environments. Three in four businesses even said they feel “ready and prepared” to deal with future data breach threats. Seven in 10 believe it’s “necessary” to use synthetic data to keep customer data safe. Many respondents considered their test data practices to be broken. Forty-two percent claimed their practices either aren’t secure or they don’t scale. Meanwhile, 20% said it’s difficult to generate and use their test data. Nearly two in three (64%) don’t understand the reasons behind using synthetic data for testing. “Fake data is designed to respect and protect the privacy of real customer data. Companies should be responsible about their data governance and being compliant when it comes to things like personal identifiable information,” said Coe. Daily Newsletter - E-mail sent every business day with a recap of the last 24 hours Weekly Newsletter - E-mail sent every Monday with a recap of the last 7 days (IN)SECURE Magazine - E-mail sent when a new issue is released