The ongoing cost to Sony as a fall out of the cyber security breach will be massive litigation cost. Beyond that cost, there is the real “employee engagement” cost as employees feel that the trust they place in their employer has been violated.
For these reasons and more, companies should consider more sophisticated and responsive methodologies and architectures for addressing this challenging environment. What is needed is a comprehensive and, maybe even more importantly, sustainable cyber security program for organizations seeking to reduce their risk exposure, provide available protections as they emerge, and sustain a responsive framework for this rapidly-evolving area to “manage down” the uncertainty level.
Unlike other security options available, we do not need a single-point solution, a specific technology, a means of gaining simple compliance, nor is it an audit or “pen-test” concept based on past methods to address a “now-and-future” problem set. Companies need a far-reaching risk-abating program which reaches across the Enterprise to find and erode risk wherever it may reside. Employees expect their personal data to be secure at their places of employment.
A second lawsuit was filed against Sony on Tuesday, this time by a group of production managers, according to The Hollywood Reporter. Plaintiffs include Susan Dukow and Yvonne Yaconelli, who claim Sony should have known better than to provoke North Korea by including the real Kim Jong-Un in The Interview. Unlike the earlier lawsuit (see below) which was filed in federal court, Dukow and Yaconelli filed in Los Angeles Superior Court. But like the federal case, it also points the finger at lax cybersecurity in the face of threats and known weaknesses and is seeking unspecified damages.