#4 - Jay Jacobs on the cost of a data breach


This series is archived ("Inactive feed" status)

Please note series archiving is a new, experimental, feature of Player FM with the aim of helping users understand how we fetch series and report on any issues.

When? This feed was archived on June 04, 2017 15:56 (1+ y ago). Last successful fetch was on November 21, 2016 23:07 (2y ago)

Why? Inactive feed status. Our servers were unable to retrieve a valid podcast feed for a sustained period.

What now? You might be able to find a more up-to-date version using the search function. This series will no longer be checked for updates. If you believe this to be in error, please check if the publisher's feed link below is valid and contact support to request the feed be restored or if you have any other concerns about this.

Manage episode 100464099 series 84378
By Discovered by Player FM and our community — copyright is owned by the publisher, not Player FM, and audio streamed directly from their servers.

The Verizon Data Breach Investigations Report (DBIR) is one of the most, if not the most, widely read and well respected annual security reports in the industry. The report analyzes nearly 80,000 cyber attacks based on contributions from 70 organizations. The resultant data is staggering - and publicly available through the VERIS framework for everyone to benefit from. The DBIR team then analyzes the data for the better part of a year and comes up with a pretty amazing report. The report gives analysis on cyber attacks broken down by victim industry, method of attack, the target and many other vectors.
This year the DBIR tackled the cost of a data breach. For the last decade or so the standard accepted by the industry was the Ponemon Institute's model. The latest DBIR offers a new model, one that is build on a completely different data collection method than Ponemon's.
This new model ended up causing quite a bit of commotion, controversy and media attention because the conclusion is starkly different than the previously established model. The guest for episode #4 of the Standard Deviant Security Podcast is Jay Jacobs, a Security Data Scientist at Verizon and a co-author of their annual Data Breach Investigation Report. We discuss the controversy, the new model for ascertaining the cost of a data breach and much more.
In addition to being a co-author of he Verizon Data Breach Investigations Report, he is a co-author of "Data Driven Security", a book covering data analysis and visualizations for information security and also hosts a podcast for data driven security and blogs at datadrivensecurity.info. Jay is also a co-founder of the Society of Information Risk Analysts and currently serves on the organization's board of directors.
Follow Jay on Twitter @jayjacobs.
Please follow the Standard Deviant Security Podcast on Twitter @standeviant and visit the website at www.thestandarddeviant.com.

17 episodes available. A new episode about every 15 days averaging 53 mins duration .