Compliance issues feeding data breaches

A lack of compliance with data security standards is leaving companies more vulnerable to data breaches, according to a new survey from Verizon Business.

The research found that companies that fail to meet the Payment Card Industry Data Security Standard (PCI DSS) are far more likely to fall victim to a data breach than compliant companies.

According to the study, organisations that suffer a breach are 50 per cent less likely to be compliant with the PCI standard.

Just 22 per cent of companies are not fully PCI compliant, although many of these had met major elements of the standard. Three quarters of those surveyed are compliant with at least 70 per cent of the standard.

The portions of PCI DSS which companies most struggle to meet are those that leave systems at risk of data breaches. Processes such as testing security systems and monitoring access to network resources are among the most common shortfalls.

Verizon Business recommends that businesses adopt a new set of best practices, such as managing compliance and security together, and view data compliance as an ongoing process rather than a short-term project.

"We hope this report will help organisations approach PCI compliance in a more informed and effective way," said Verizon Business vice president of technology and innovation Peter Tippett.

"Ultimately, we want the same thing as the rest of the industry: fewer payment card losses and data breaches."