[ISN] Report: Noncompliance Much More Costly Than Compliance

http://www.darkreading.com/security-monitoring/167901086/security/security-management/229200129/report-noncompliance-much-more-costly-than-compliance.html

By Kelly Jackson Higgins
Darkreading 
Jan 31, 2011

If you're wondering whether the cost of complying with security 
regulations is really worth it financially, think again, according to a 
new report: Noncompliance costs organizations, on average, 2.65 times 
more than meeting compliance rules does.

The Ponemon Institute study -- which was commissioned by Tripwire -- of 
46 global firms during a 12-month period found that meeting compliance 
costs on average $3.5 million, while noncompliance can add up to around 
$9.4 million in costs including business disruption, productivity loss, 
revenue loss, and fines. Ponemon conducted benchmark studies of 
organizations in various industries (none of which were customers of 
Tripwire) and interviewed some 160 executives in those organizations.

Companies spent between $446,000 to more than $16 million during that 
period, according to the Ponemon report, with the most expensive 
compliance efforts being data protection and enforcement. Technologies 
for data protection and incident response management incurred the 
biggest bills.

In noncompliant scenarios, business disruption and loss of productivity 
were the costliest outcomes -- an average of $3.2 million and $2.4 
million, respectively.

[...]


___________________________________________________________      
Tegatai Managed Colocation: Four Provider Blended
Tier-1 Bandwidth, Fortinet Universal Threat Management,
Natural Disaster Avoidance, Always-On Power Delivery 
Network, Cisco Switches, SAS 70 Type II Datacenter. 
Find peace of mind, Defend your Critical Infrastructure.
http://www.tegataiphoenix.com/