10. Limited Security Expertise and Education
Internal security controls are not keeping pace with data growth and many organizations are ill-equipped to deal with a security
breach. Often this is due to the lack of expertise required to implement security controls, enforce policies, or conduct incident
response processes.
According to the Ponemon Institute 2014 Cost of Data Breach Study, for 30 percent of data breach incidents, the main root cause was
classified as the “human factor” – in other words, a negligent employee or contractor.3