Is Cyber Security Maturing?

Part of an organization’s mission is to protect data. Whatever the industry regulatory oversight – PCI, FDA, HIPAA, etc. – compliance naturally comes with it, though this hasn’t always been the case. “Ten to fifteen years ago, the focus was making sure that data was backed up, general controls were in place, and the company was not getting sued,” says Tomallo. Companies in industries without a regulatory reporting process chose not to invest beyond “reasonable security controls and processes”. The lack of accountability came back to haunt them over time as security incidents and breaches occurred, causing a resurgence in the security field.