The data must flow (Part 1)

(with apologies to Frank Herbert…)

It may be hard to imagine now, but it wasn’t that long ago that discerning business leaders were able to have thoughtful discussions on the synthesis of technology and business strategy while scarcely ever uttering words about cybersecurity. 

How times have changed. 

Today, cybersecurity concerns touch most every aspect of business operations as companies and governments have deployed substantial digital assets and vulnerabilities abound. In fact, the threat economy now rivals the GDP of advanced countries. By one estimate alone, the World Economic Forum calculates the cost of cybercrime at $10.5 trillion USD in 2023. And it’s rising.

Business leaders are adapting strategies to meet the changing times. For example, the influential Director’s Handbook on Cyber-Risk Oversight, recently released by the National Association of Corporate Directors (NACD), sets its first principle as “Directors need to understand and approach cybersecurity as a strategic, enterprise risk, not just an IT risk.” 

Investments in cyber are also changing: 65% of organizations plan to increase cybersecurity spending in 2023. Gartner projects that spending on information security and risk management products and services will grow 11.3% to reach more than $188.3 billion this year alone.

An Occult View of the Cyber-Enabled Economy

But there’s a deeper level to uncover: the lifeblood of our deeply connected global system is data. At this concealed level, global business is deeply challenged by the complexities of cross-border information flows, cybercrime, data privacy, new frameworks, and increasing or changing cybersecurity regulations

Business leadership today needs to pay particular attention to data and flows. Consider that a recent McKinsey report notes the fastest-growing global flows are now data, services, intellectual property, and international students. Estimates vary on how much data is flowing at any given second (an “intangible”) but there’s no denying its centrality.

It is also clear that ensuring the free flow of data across borders is a paramount concern to business and government. After all, industry derives exceptional value from its use, allowing for rapid innovation such as what we are now seeing with advancements in AI. It also affords the tantalizing possibility of solving some of the world’s most pressing crises. 

But how is data best protected?

Along with technological changes and risks to business operations, it’s critical to understand that it’s the regulatory environment that allows data to flow and businesses to operate at global scale. Regulations also provide an opportunity for businesses and governments to help protect data, whether intellectual property or PII, from cyber-enabled threats. 

Indeed, compliance with data regulations can actually help businesses grow and fight the scourge of cybercrime.

Your organization needs to think deeply about the role of data, privacy, protection, and flows. Consider the following acts and regulations and their implications for your organization:

Lastly, governments have developed free resources for you to identify and manage privacy and data risks. For example, NIST offers a voluntary Privacy Framework tool. And the EU offers a GDPR checklist tool for data controllers.

In our second blog entry on the centrality of data and the challenges of keeping it secure and flowing, my colleague Dr. Rois Ni Thuama and I have the pleasure of talking with one of the world’s foremost experts on the topic, Linda Priebe of Culhane Meadows, PLLC.

PUBLISHED BY

Sean Costigan

9 May. 2023

SHARE ARTICLE:

Categories

Recent Posts

VIEW ALL
Thought Leadership

How the EU can mandate for stronger email security

Antony Seedhouse

Executive summary: The article examines how the EU can proactively close email security gaps by leveraging the NIS2 Directive to mandate robust, harmonized standards like DMARC, DKIM, and SPF across all member states. By acting now, the EU not only protects its digital ecosystem but also sets a global benchmark for cybersecurity best practices.…

Read more
News

Europe’s #1 for DMARC: Red Sift OnDMARC does it again

Francesca Rünger-Field

G2’s Summer 2025 Report has landed, and we’re proud to share that Red Sift OnDMARC remains the #1-rated DMARC solution in Europe. This marks another strong season for OnDMARC, with continued recognition across G2’s category reports. We were featured in 18 reports this quarter, taking top spots in the Mid-Market Results Index and Mid-Market…

Read more
Cybersecurity

Healthcare and cybersecurity: 73% of breaches lack DMARC enforcement

Faisal Misle

The healthcare sector has become a target for both low-level and occasionally spectacularly successful cyberattacks. Hospitals, insurers, medical supply chains, service and medical providers are prime targets for threat actors, with email phishing attacks, ransomware, and data breaches on the rise. In 2024, 94% of U.S. healthcare organizations experienced a cyberattack, with the average…

Read more
BIMI

VMC and CMC: What are the new requirements?

Jack Lilley

Executive Summary: Staying updated on Verified Mark Certificates (VMCs) and Certified Mark Certificates (CMCs) is crucial for organizations aiming to authenticate their logos and enhance brand trust in email communications. Discover the key changes in the latest security requirements and compare the differences between VMCs and CMCs.​ This article: Introduction Verified Mark Certificates (VMCs) and…

Read more