According to a new report, the manner in which businesses handle consumer data is now a top priority for consumers. In fact, 60 percent of respondents to the “IBM Cybersecurity and Privacy Research” survey, conducted by The Harris Poll on behalf of IBM, said they’re more worried about cybersecurity than war.

The survey revealed that while 78 percent of Americans consider effective data privacy policies to be “extremely important,” just 20 percent “completely trust” the organizations that store and control their personal information. It also noted that cybersecurity is now “a crucial consideration when making purchase decisions.” These results point to an increasing need for comprehensive and well-communicated data protection strategies.

Balancing Data Privacy and Personalization

With e-commerce sales trending upward — the U.S. Census Bureau estimated that online retail sales across the U.S. hit $119 billion in Q4 2017 — users are increasingly aware of their online data privacy. More than half of respondents to a survey conducted by the Centre for International Governance Innovation (CIGI) indicated that they are more concerned about their online privacy than they were a year ago.

Consumer worry isn’t misplaced. According to Fast Company, some organizations working to meet upcoming General Data Protection Regulation (GDPR) privacy requirements are specifically updating their terms of service to exclude these protections if users live outside the European Union (EU).

“Increasingly, we are seeing companies around the world trying to balance providing personalized services to consumers while maintaining privacy,” said John Kelly, IBM senior vice president of cognitive solutions. “Getting this right requires companies working closely with each other and, importantly, with governments to ensure the right protections are in place.”

IBM Survey Reveals Evolving Expectations

The Harris Poll survey found that 75 percent of consumers will not buy products from companies that they don’t trust to properly secure their data. What’s more, 73 percent said they believe businesses prioritize profits over consumers’ security needs.

It’s not all bad news for businesses, however: 63 percent of respondents said they trust organizations to help repair damage after a cyberattack, while 59 percent were “very confident” in companies’ current ability to protect information.

There is room for improvement. Seventy-three percent of respondents said it’s “extremely important” for companies to take quick action to stop a data breach. Meanwhile, 70 percent of global consumers said it’s time for governments to step in “given that businesses have not been able to do enough.”

“To combat the constant barrage of threats,” technology analyst Roger Kay wrote in a blog post, “governments around the world, the tech industry and tech customers need to work together  —  consistently and over time.”

In addition, 69 percent of respondents said they consider quick communication to be crucial in the aftermath of a breach, while 67 percent said companies should cover the cost of third-party protection services if data is compromised. In the U.S., two-thirds of consumers ranked defense against external actors as more important than internal policies about consumer data handling.

Data privacy is now a key public concern, pulling ahead of confidence in leadership and corporate social responsibility when it comes to driving consumer choice. As the report put it, cybersecurity is “not just an under-the-hood operational function, it is part of how companies are judged in the consumer marketplace.”

More from

Hackers are Increasingly Targeting Auto Dealers

Auto dealerships are increasingly concerned with cybersecurity in the face of new regulations and an alarming rise in cyberattacks. The Second Annual Global State of Cybersecurity Report by CDK Global found that 85% of dealerships say cybersecurity is very or extremely important relative to other operational areas. Additionally, 89% say cybersecurity is more important than last year, a 12% increase. Not surprisingly, only 37% of auto retailers are confident in the current protection, which is a 21% decrease from 2021.…

Container Drift: Where Age isn’t Just a Number

Container orchestration frameworks like Kubernetes have brought about untold technological advances over the past decade. However, they have also enabled new attack vectors for bad actors to leverage. Before safely deploying an application, you must answer the following questions: How long should a container live? Does the container need to write any files during runtime? Determining the container’s lifetime and the context in which it runs is critical, especially when hosting an internet-facing service. What is Container Drift? When deploying…

Patch Tuesday -> Exploit Wednesday: Pwning Windows Ancillary Function Driver for WinSock (afd.sys) in 24 Hours

‘Patch Tuesday, Exploit Wednesday’ is an old hacker adage that refers to the weaponization of vulnerabilities the day after monthly security patches become publicly available. As security improves and exploit mitigations become more sophisticated, the amount of research and development required to craft a weaponized exploit has increased. This is especially relevant for memory corruption vulnerabilities.Figure 1 — Exploitation timelineHowever, with the addition of new features (and memory-unsafe C code) in the Windows 11 kernel, ripe new attack surfaces can…

OneNote, Many Problems? The New Phishing Framework

There are plenty of phish in the digital sea, and attackers are constantly looking for new bait that helps them bypass security perimeters and land in user inboxes. Their newest hook? OneNote documents. First noticed in December 2022, this phishing framework has seen success in fooling multiple antivirus (AV) tools by using .one file extensions, and January 2023 saw an attack uptick as compromises continued. While this novel notes approach will eventually be phased out as phishing defenses catch up,…