Obsession with cyber breach notification fuelling costly mistakes

Regulators’ push on breach notification rules has fed an obsession with a 72-hour window, with the article citing GDPR and Apra’s CPS 230 standard as drivers, according to Shannon Murphy, global security and risk strategist at Trend Micro. The piece argues that this focus can still lead to costly mistakes during incidents, particularly when organisations lack a formal incident response plan.

Murphy notes that the stressed, high-pressure environment can cause people to burn out, thereby increasing the risk of errors. Two critical risks highlighted are that evidence can be damaged, destroyed, or otherwise invalidated by panicked attempts to restore services quickly, and that a blame game can lead to evidence being deliberately concealed or destroyed. Read more at Computer Weekly.