Experts question Indian companies’ approach to data breach prevention as insurance policies rise

IT Governance Ltd suggests that Indian organisations are approaching cyber risks the wrong way as data breach prevention insurance policies rise.

NEW DELHI, INDIA, October 7, 2014 /EINPresswire.com/ -- In the last few months about 35 large companies in India – including third-party data processors and financial institutions – have reportedly taken out cover against financial losses arising from data breaches. Cover can reach R 600 crore and demand is only expected to rise as cyber risks continue to increase. Insurers HDFC Ergo, ICICI Lombard and Tata AIG already offer policies that cover cyber risks, and others are apparently working on similar products.

This growing demand for insurance demonstrates that the security of information assets remains an acknowledged business-critical issue, but IT Governance Ltd, the global provider of cyber security expertise, suggests that Indian organisations are approaching cyber risks the wrong way.

Founder and Executive Chairman of IT Governance, Alan Calder says, “Rather than shouldering the greater financial burden of preparing for the failure of inadequate cyber security systems, Indian organisations – whatever their sector – would be better served by spending a relatively small amount implementing robust information security management systems (ISMSs), as set out in the international standard ISO27001.”

“An ISO27001-compliant ISMS provides a best-practice approach to information security management that addresses the whole organisation, and encompasses people, process and technology” Calder concludes.

Accredited certification to the Standard offers globally acknowledged proof that information security best practice has been adopted. As customers increasingly expect businesses to be able to prove their information security credentials, it comes as no surprise that certification to ISO27001 increased nearly 20% in India last year.

Implementing the Standard can be a daunting drain on time and resources, but IT Governance’s ISO27001 Do It Yourself package makes it easy for organisations that already have substantial management system expertise (with, for example, ISO9001 or ISO20000), the available internal resources, and an understanding of information security management to implement an ISMS.

Containing the relevant official standards as well as two of IT Governance’s essential bestselling implementation guides, the ISO27001 Do It Yourself package offers a low-cost route to ISO27001 implementation.

Find out more: www.itgovernance.in/p-1037.aspx

The Do It Yourself option is part of IT Governance’s ISO27001 packaged solutions. For different levels of help and support when implementing ISO27001, please see our ‘Get A Little Help’, ‘Get A Lot Of Help’ and ‘We’ll Do It For You’ packages.
Alternatively, organisations can call IT Governance 000 800 100 5885 or email servicecentre@itgovernance.co.uk for more information on how IT Governance can help protect their information security.

Melanie Watson
IT Governance Ltd
00448450701750
email us here