What Does Data Security Mean?

Data security refers to protecting digital information from corruption, theft or unauthorised access throughout its entire life cycle. This includes the use of technologies such as encryption, data masking and data erasure, as well as the implementation of access controls and organisational policies. Robust data security management enables organisations to protect their information against cyberattacks and to minimise risks arising from human error or insider threats. see also Fortinet: definition of data security

Advancing digitalisation has significantly increased the importance of cybersecurity. Companies face the challenge of protecting their digital systems and data against a growing number of cyberattacks. Below, we shed light on key aspects of cybersecurity, including the definition, current threats, regulatory frameworks such as the EU's NIS2 Directive, the role of ISO 27001 Annex A.6 and current statistics on cybercrime.

Cybersecurity comprises measures to protect digital systems, networks, applications and devices against malicious attacks. The aim of these attacks is often to gain unauthorised access to sensitive data or to disrupt business processes. The attackers' motivation can vary, ranging from financial gain and industrial espionage to state-sponsored operations. For more information, see also Dataguard blog on cybersecurity

The threat landscape is constantly evolving. The most common attack methods include:

• Phishing: fraudulent attempts to obtain sensitive information through fake e-mails or websites.
• Ransomware: malware that encrypts data and demands a ransom for its release.
• Password attacks: attempts to steal or guess passwords in order to gain unauthorised access.

According to a study by Bitkom e.V., around 84 % of German companies were affected by cyberattacks in 2022, resulting in annual damage of around 203 billion euros. bitkom press release Wirtschaftsschutz 2022 (business protection)

With the NIS2 Directive, the European Union has introduced stricter cybersecurity requirements. Its aims include strengthening resilience against cyberattacks, introducing stricter supervisory mechanisms and improving cooperation between member states. The directive extends its scope to all medium-sized and large companies in relevant sectors and places particular emphasis on risk management and supply chain security. Dataguard NIS2 Directive

The ISO 27001 standard for information security management systems contains specific controls in Annex A.6 for the use of mobile devices and teleworking. Companies are expected to develop policies governing the secure use of mobile devices and work outside the traditional office environment. This includes aspects such as physical protection, access controls, encryption and protection against malware. Dataguard: use of mobile devices and working from home under ISO 27001

The financial damage caused by cybercrime is enormous. According to the "Hackerpocalypse" report by Cybersecurity Ventures, the global cost of cybercrime amounted to 6 trillion US dollars in 2021. These costs are forecast to rise to 10,5 trillion US dollars a year by 2025. Cybercrime Magazine 2020: Forecast 2025

Conclusion

In view of the growing threats and the considerable economic damage, it is essential for companies to implement robust cybersecurity strategies. Compliance with regulatory requirements such as the NIS2 Directive and standards such as ISO 27001 offers a structured approach to minimising risks and increasing resilience against cyberattacks. At the same time, it is important to keep informed about current threats on an ongoing basis and to take appropriate protective measures.

Costs for companies in Germany:

According to a study by Bitkom e.V., cyberattacks caused economic damage of 203 billion euros in Germany in 2022. This represents a doubling of the damage compared with previous years. The high costs result from direct financial loss, production downtime, the cost of repairing damage, data protection breaches, reputational damage and regulatory penalties.