Last week 8,400 British students about to enter university received an e-mail from the Student Loans Company (SLC), a government

admin2013-06-26  51

问题     Last week 8,400 British students about to enter university received an e-mail from the Student Loans Company (SLC), a government body, reminding them to complete their application forms. It came with an attachment that listed all 8,400 e-mail addresses. The outfit later issued a sheepish apology and promised an "internal investigation". At best, such data breaches make a small dent in a firm’s reputation and the whole thing blows over, as it did SLC’s case; at worst, though, companies lose the trust of their customers and also have to pay large fines. Sony, an ailing Japanese electronics giant, may never quite recover from breach last year, when hackers stole the personal details of over 100m customers.
    The explosion of data in recent years was always going to make data breaches more common, as two recent reports make clear. The first is an annual publication commissioned by Symantec, a maker of security software, and carried out by the Ponemon Institute, a data-protection researcher, to look into the cost of data breaches in several countries. Now in its seventh year, the report had some good news for Americans. Calculating the costs of investigations, compensation, customer support and projected loss of revenue, it found that the average cost to a company per breached record declined for the first time since the numbers are tracked. The figure dropped from $214 in 2010 to $194 in 2011, suggesting that companies had become better both at preventing and responding to breaches.
    Europeans fared less well. The cost rose from £ 71 to £ 79 ($113 to $126) in Britain, from ¢98 to ¢122 ($ 130 to $ 162) in France and from € 138 to ¢ 146 in privacy-conscious Germany. In all four countries, around two-thirds of all breaches were the result of technical faults and malicious attacks. But the remaining third was down to negligence. They could, in other words, never have happened.
    The second study goes some way to explaining why they did. Iron Mountain, a data-management company, commissioned PricewaterhouseCoopers, a consultancy, to assess the risk of information loss faced by mid-size European companies based on their attitudes to managing data. The report looks at 600 businesses in six European countries across different sectors. It found that businesses tend to regard data protection issues as the responsibility of IT departments. More than half thought that technology can solve the problem. Only 1% of the businesses surveyed believed it concerned all employees—and thus required a change in behavior.
    Both reports conclude that is precisely what is needed. Symantec’s study found a correlation between having a senior executive in charge of information security and lower costs of data breaches. " It has to start at the top," says Marc Duale, Iron Mountain’s head. The best solution need not be the most expensive—employee-awareness programs and staff training can be more effective than pricey IT upgrades. Malicious attacks may be unavoidable but silly mistakes are unforgivable.
The first report probes into the problem of data breach by______.

选项 A、calculating the capital that companies pour into preventing data breach
B、assessing the risk of information loss faced by different companies
C、identifying the factors that contribute to data breach
D、computing the loss and expenditure arising from data breach

答案D

解析 文章第二段和第三段具体介绍了第一份调查报告的内容。第二段中明确指出“The first is an annual publication…to look into the cost of data breaches in several countries”,“第一份年度调查报告调查不同国家为数据泄露所付出的代价”。主要的方法是计算调查费用、善后补偿费用、客户支持上的花费以及对企业造成的潜在收入损失(Calculating the costs of investigations,compensation,customer support and projected loss of revenue)。因此本题的正确答案应该选[D]。[A]偷换概念,将公司为数据泄露事故所付出的开销偷换为公司为了防止泄露事故而投入的资金。[B]张冠李戴,将第二份报告的内容说成是第一份报告的内容。[C]不是该报告的主要内容。
转载请注明原文地址:https://kaotiyun.com/show/WOd4777K
0

最新回复(0)