Because the assault floor expands and the risk panorama grows extra advanced, it’s time to think about whether or not your information safety technique is match for goal
05 Sep 2025
•
,
5 min. learn
A single safety breach can jeopardize every little thing you’ve constructed. The theft of mental property and confidential buyer information can lead to a cascade of penalties, from hefty monetary losses and a shattered model fame to in the end the specter of placing the whole way forward for your organization in danger.
In response to IBM’s Value of a Information Breach Report 2025, the common value of an information breach stands at almost $4.5 million. However the determine might attain many occasions that relying on what sort of information is stolen.
Stats like these ought to make protecting measures equivalent to information encryption a no brainer. In truth, 87% of companies stated final yr that they’d enhance funding in encryption . If your enterprise shouldn’t be becoming a member of them, it may be price asking why.
Why do you want encryption?
By reworking plain textual content information into an unreadable format, information encryption serves to guard your group’s most delicate data, whether or not at relaxation or in transit. There are various causes for wanting to take action. These embody:
- Distant working: Almost a quarter of US staff do business from home not less than a number of the time. This creates additional dangers across the instruments they use to take action, and the info saved and accessed by way of these instruments. Private laptops and units might not be as safe as their company equivalents.
- A knowledge explosion: World companies are creating extra information than ever. It’s anticipated that 181 zettabytes shall be generated in 2025, which means that there’s extra for adversaries to steal and maintain to ransom, and extra likelihood of it being by chance leaked. From prospects’ personally identifiable data (PII), to delicate IP, monetary information, and M&A plans, if these develop into compromised, there are probably critical repercussions in retailer. The information explosion can also be accelerating due to development in AI and huge language fashions (LLMs), which require enormous volumes of doubtless delicate information to coach.
- Gadget loss/theft: As extra staff adapt to a hybrid working setting, there’s a larger danger that the laptops, tablets and different cell units they carry with them are misplaced or stolen. If not protected, the info saved or accessed by way of these may very well be compromised.
- Third-party threats: Menace actors proceed to get higher at breaching company cyber defenses. Final yr within the US alone there have been over 3,100 particular person information compromises, leading to breach notifications being despatched to greater than 1.3 billion victims.
- Underperforming safety: It’s getting more and more straightforward to bypass conventional defenses on the company “perimeter” by merely utilizing stolen, guessed or phished credentials belonging to staff. Credential abuse accounted for preliminary entry in a fifth (22%) of information breaches final yr, with phishing at 16%, says Verizon. Infostealers are a rising headache. One report claims that 75% (2.1 billion) of three.2 billion credentials compromised in 2024 have been stolen by way of infostealer malware.
- Ransomware: Encryption can also be a weapon wielded by attackers, and risk actors are inflicting rising issues for community defenders with ransomware and information extortion schemes. Ransomware was current in 44% of all information breaches final yr, a 37% annual enhance, in line with Verizon. An encryption resolution can’t cease the dangerous guys from locking you out of your information, however it should render something they steal ineffective. As the specter of AI-driven ransomware looms ever bigger, the necessity for a complete information safety technique has by no means been larger.
- Insecure communications: A lot of the world communicates by way of end-to-end encrypted messaging platforms, however most companies nonetheless operate on e-mail. Sadly, e-mail wasn’t designed with safety as a core, built-in function, and except it’s end-to-end encrypted it may be a juicy goal for eavesdropping and interception. So as to preserve delicate information protected from prying eyes, encryption that scrambles the e-mail content material from the sender’s machine till it reaches the recipient’s machine needs to be a non-negotiable line of protection.
- Insider threats: Verizon claims 18% of breaches concerned inner actors final yr, rising to 29% in EMEA. Though many of those incidents are resulting from carelessness slightly than malice, instances like the Coinbase breach spotlight the persistent risk from the latter.
The price of poor information safety
In case your company information leads to the fallacious arms, it might result in:
- Main monetary prices (IBM lists detection and escalation actions; notification of regulators, information topics and third events; post-breach response; and misplaced enterprise).
- Reputational harm. Buyer loyalty is difficult received and simply misplaced: 94% of organizations Cisco spoke to say their prospects wouldn’t purchase from them if they didn’t correctly shield their information.
- A major compliance burden: Rules and requirements together with DORA, NIS2, GDPR, HIPAA, CCPA, and PCI DSS 4.0 all demand information encryption in some type.
It’s additionally price contemplating the cyber-insurance context of information safety. Carriers both might not insure your enterprise if it doesn’t deploy sturdy information encryption, or else enhance premiums.
What sort of encryption works finest?
Encryption scrambles plaintext information utilizing a specialised algorithm and encryption key(s). Make sure to select merchandise based mostly on confirmed, strong algorithms like AES-256 that provide a excessive stage of safety. However past this, you will want to resolve on the answer that most closely fits your wants. There are merchandise designed particularly for encrypting databases, and cloud environments, for instance.
Some of the common varieties of information safety is full-disk encryption (FDE). This scrambles information on system disks, partitions and whole drives throughout laptops, desktops and servers. When evaluating options, look out for options that provide strong encryption (AES-256), cross-platform help (throughout Home windows and macOS, for instance), versatile licensing, centralized management from a single admin portal, and minimal end-user interplay.
Relying in your necessities, you may additionally be serious about an encryption resolution that covers:
- Recordsdata and folders, digital disks and archives: Helpful for delicate information that must be shared or saved in unencrypted environments (e.g., when you’ve got a shared units coverage).
- Detachable media: To guard information residing on any USB drives or comparable from theft or loss.
- Electronic mail and attachments: Encrypting information in transit will assist guarantee solely the meant recipient will have the ability to learn e-mail content material.
It’s potential to get many of those capabilities in encryption options with centralized administration, like these supplied by ESET.
Bringing all of it collectively
Information encryption is a much-needed line of protection that needs to be one of many important layers of any fit-for-purpose safety technique. On the similar time, it’s all the time vital to do not forget that it really works finest as one among a number of safeguards and layers of safety. Safety software program throughout all units, sturdy entry controls, together with multi-factor authentication (MFA), vulnerability and patch administration, file server and cloud utility safety, and end-user safety consciousness coaching will all go a great distance towards conserving your enterprise protected.
In a world of constantly evolving threats, think about proactive protection that comes with superior EDR/prolonged detection response (XDR) and affords crucial detection capabilities throughout endpoint, e-mail, cloud and different layers, plus response and risk searching in actual time. For corporations which can be brief on assets, managed detection and response (MDR) providers can do the heavy lifting, pairing industry-leading prevention, detection and response capabilities with world-class safety analysis and risk intelligence.
