It sounds impressive that “10 million intrusion attempts are thwarted, on average, on a monthly basis,” but we know that less than 14% of breaches are detected by internal security tools according to the annual international breach investigations report from Verizon. Detection by external third party entities unfortunately increased from approximately 10% to 25% during the last three years.

Unfortunately, current security approaches can't tell you what normal looks like in your own systems. I think that we need to focus on protecting our sensitive data itself.

Organizations that store sensitive information can use modern technologies to secure sensitive
data. The payment card industry is enforcing the use of modern data security methods and I think that security of personal information is even more important.

Ponemon Institute published an interesting survey related to the recent spate of high-profile
cyber attacks. According to the survey database security was recommended by 49% of respondents, but the study found that organizations continue to allocate the bulk of their budget (40%) to network security and only 19% to database security.

Ponemon concluded that “This is often because organizations have traditionally spent money on network security and so it is earmarked in the budget and requires no further justification.”

Aberdeen Group reported in a very interesting study with the title “Tokenization Gets Traction” that tokenization users had 50% fewer security-related incidents than non-users and 47% of respondents are using tokenization for something other than cardholder data.

Ulf Mattsson, CTO Protegrity