Three Step Pogram: Pre-Breach Remedies To Contain The Costs Of A Cyber Attack

Data breaches are very costly. Organisations should consider three basic steps to ensure they are prepared to remedy a future breach.

Over the last year there have been a variety of high-profile security breaches ranging in severity, from TalkTalk, which was fined £400,000 for its 2015 breach, to Yahoo, which had $1 billion of its potential value wiped by the news of its own hack.

When looking at most security breach cases it’s clear that the size of their financial implications is often vastly underestimated. Companies need to put the same amount of effort into protecting against the immediate aftermath of a breach, as they do in its initial prevention.

Mobile breaches present a particularly unique challenge for organisations. Responding to any cyber breach is complicated, but the complexity is often worsened due to the personal nature of a mobile device itself.

A tangled web of data cross-pollination is being created due to the increasing popularity of BYOD and work emails on personal devices. This means that productivity can increase among employees, but with greater mobile use comes significant complications around clean-up and remediation when those mobiles are breached.

With employees innocently pushing forward with productivity, IT departments must take control of the security implications.

A recent study from Wandera found that companies spend three times as much on remedying a mobile security breach than they could have spent to simply prevent it in the first place.

In the UK alone, the average cost of remedying an enterprise mobile security breach stands at an astounding £167,000. To avoid this, organisations need to consider three basic but crucial steps to ensure they are sufficiently prepared to remedy a future breach.

1.    Assess and notify

This should be at the top of the to do list when a breach occurs. The news will need to be shared within your organisation immediately. Too often businesses are silent when data breaches occur, as though the fear of external discovery outweighs the importance of having a wider discussion throughout the organisation.

In terms of a mobile data breach, businesses need to realise that the situation is different. The split personality of a mobile device, by definition, involves an individual as well as the business. The faster the company notifies everyone involved and shares intelligence on what was breached, the less of a ripple effect the breach will have.

Passwords will need to be changed, including all device passwords, not just those used within the company, but any that were put at risk. Defensive steps will also need to be taken if sensitive data such as contact lists, credit cards, business or personal images and location information was leaked.

2   Perform a forensics analysis

To truly clean up a breach, there must be a clear understanding of how it occurred and what was put at risk. Performing a post-breach forensics investigation must start with visibility across the mobile fleet in the first place.

To get ahead before a breach occurs, companies should invest in a mobile threat defence solution that can provide data on how the breach occurred, which users were impacted and provide clues as to which data may have been compromised.

With complete visibility of the issue, businesses will be aware of what the next move needs to be to minimise further damage.

3.    Improve defences

The visibility that is obtained during forensics investigation can also pave the way for improved defences via policy controls in the future. Typically, IT teams roll out an open mobility program to start allowing users to install their own apps and ensure there are no restrictions on websites they can access.

As breaches occur, compliance violations are observed and as productivity concerns are raised, IT will often need to take a step back and implement mobile data policies to ensure that these corporate resources are used effectively and securely.

Companies need to take a close look at their access policies after a breach and ensure that adequate steps are in place to protect mobile data, while simultaneously safeguarding users’ productivity.

Security breaches don’t have a consistent formula or uniform. They come in different shapes, sizes and levels of damage, meaning there isn’t one way for businesses to protect themselves against a breach.

The sad reality is that it’s a case of ‘when’ a security breach will happen, instead of ‘if’ now, and organisations must be prepared for the aftermath.

As the probability of a hack increases, and the use of employee devices increases alongside this, organisations must take the above three steps into consideration to ensure that issues after the breach are minimised.

Information-Age:       Tech Jobs Would Be Great, If It Wasn’t For The Users:

 

 

« Social Media & The New Advertising Model (£)
Spies Use Tinder »

Infosecurity Europe
CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Infosecurity Europe, 3-5 June 2025, ExCel London

Infosecurity Europe, 3-5 June 2025, ExCel London

This year, Infosecurity Europe marks 30 years of bringing the global cybersecurity community together to further our joint mission of Building a Safer Cyber World.

TÜV SÜD Academy UK

TÜV SÜD Academy UK

TÜV SÜD offers expert-led cybersecurity training to help organisations safeguard their operations and data.

Resecurity

Resecurity

Resecurity is a cybersecurity company that delivers a unified platform for endpoint protection, risk management, and cyber threat intelligence.

The PC Support Group

The PC Support Group

A partnership with The PC Support Group delivers improved productivity, reduced costs and protects your business through exceptional IT, telecoms and cybersecurity services.

MIRACL

MIRACL

MIRACL provides the world’s only single step Multi-Factor Authentication (MFA) which can replace passwords on 100% of mobiles, desktops or even Smart TVs.

Exclusive Networks

Exclusive Networks

Exclusive Networks accelerate market entry and growth for innovative cybersecurity, networking and infrastructure technologies.

LogicManager

LogicManager

LogicManager offer a complete set of IT governance, risk and compliance software solutions and advisory services.

BlueID

BlueID

BlueID is an IDaaS technology product which enables your objects to securely connect and interact with your users’ smart phones and smart watches.

NordForsk

NordForsk

NordForsk facilitates and provides funding for Nordic research cooperation and research infrastructure. Project areas include digitalisation and digital security.

BMS Group

BMS Group

BMS is an independent, employee-owned specialist insurance broking group. Broking solutions include Cyber and Technology.

OSIRIS Lab - NYU Tandon

OSIRIS Lab - NYU Tandon

The Offensive Security, Incident Response & Internet Security Lab (OSIRIS) is a security research environment where students analyze and understand how attackers take advantage of real systems.

CyberArrow

CyberArrow

CyberArrow (formerly EBDAA) is a consultancy company providing high quality consultancy services in Risk & Compliance and Awareness & Education.

Romanian Association for Electronic Industry & Software (ARIES)

Romanian Association for Electronic Industry & Software (ARIES)

ARIES is the Romanian Association for Electronic Industry and Software, the biggest and most influental organization created for the IT&C industry in Romania.

Highland Capital Partners

Highland Capital Partners

Highland Capital Partners is an early stage venture capital firm focused on category-defining businesses in consumer and enterprise technology, including cybersecurity.

Cryptika

Cryptika

Cryptika is a fully integrated IT security and managed services provider, specialized in Next-Generation Cyber Security Technologies.

Genius Guard

Genius Guard

Genius Guard specializes in DDoS Protection, DDoS Protected Webhosting, HYIP Hosting, Bitcoin Hosting, Cryptocurrency Hosting.

VeriClouds

VeriClouds

VeriClouds is a password verification service that helps organizations detect compromised passwords and stop account takeover attacks.

Aunalytics

Aunalytics

Aunalytics is a data platform company that delivers insights as a service to answer your most important IT and business questions.

PureSquare

PureSquare

PureSquare exist to empower people with simple solutions for their increasingly complex digital security & online privacy needs.

VeriBOM

VeriBOM

VeriBOM is a SaaS security and compliance platform that helps protect you and your customers through automation, documentation, and transparency for every software application you build or run.

Point Wild

Point Wild

Point Wild is a holding company that acquires, integrates and manages a diverse portfolio of best-in-class cybersecurity brands for consumers and enterprises.