What’s the cause of data loss and theft?

User errors leads the list of the primary causes of data loss, followed by violations of policy, Internet threats, IT vulnerabilities and an insufficient number of IT controls (Figure 1).

Figure 1: Causes of data loss and theft

Source: IT Policy Compliance Group, 2007

Guidance recommendations

The causes of data loss and theft are clear indications of the important role that employee education and procedural controls play in reducing the likelihood of data theft and loss.  It is also clear that procedural controls are not sufficient to stem data losses and thefts.  After user errors, all other causes of data loss and theft are smaller, but over time add up.

Reducing losses and thefts of sensitive data is going to take a concerted effort that includes:

·       Delivering training to employees and managing exceptions to policy

·       Improving IT controls

·       Automating IT controls

·       Increasing the frequency of measurements and reporting

·       Maintaining an inventory of sensitive data

© IT Policy Compliance Group, 2007