ISACA在数据隐私日之前发布的《澳门赌场官方下载》调查报告显示，人们对确保敏感数据隐私的能力的信心正在下降
Schaumburg, IL, USA面对复杂且不断变化的全球数据隐私法规网络，包括今年刚刚生效的新法规，澳门赌场官方下载必须遵守法规，保护数据主体的隐私，否则就会失去信任，声誉受损. ISACA’s Privacy in Practice 2023 research report, released today ahead of Data Privacy Day on 28 January, finds that enterprises that consistently practice privacy by design reap rewards, but many face challenges getting there because of privacy budgets, staffing and skills gaps.
The survey report—reflecting the insights of 1,890名目前从事数据隐私工作或对其组织内的数据隐私功能有详细了解的全球受访者检查了隐私人员配置, organization structure, frameworks and policies, budgets, training, and data breaches.
The ROI of Privacy by Design
调查发现，澳门赌场官方下载一直在有意识地保护隐私(30%), up two points from 2022) are at an advantage. 他们对组织确保敏感数据隐私的能力完全或有一定信心的可能性是前者的1.5倍(65%对50%). (占总受访者的40%)，并且更有可能看到他们组织的隐私策略与组织目标保持一致(92% vs. 73 percent total).
Additionally, organizations that always practice privacy by design:
- 表示他们的董事会适当地优先考虑隐私(76%，而总比例仅为55%)
- 在他们的组织中有更多的员工担任隐私角色(隐私员工人数的中位数几乎是10人的两倍，为19人)，并且更有可能认为他们的隐私部门人员配备充足(44%对. 34 percent total).
Privacy Program Obstacles
The ISACA research identified three top obstacles to forming a privacy program:
- Lack of competent resources (42 percent)
- Lack of clarity on the mandate, roles, and responsibilities (40 percent)
- Lack of executive or business support (39 percent)
虽然超过一半的受访者认为他们的董事会充分重视隐私(55%), 22 percent do not, and 20 percent do not know. 这表明，董事会有机会就其对隐私努力的承诺进行更好的沟通. 38%的受访者表示，在组织中缺乏知名度和影响力是制定隐私计划的一个挑战, which may signal a board that does not adequately prioritize privacy.
Privacy budgets also remain underfunded at many organizations, 42%的受访者表示他们的隐私预算资金不足，只有36%的受访者表示资金到位. 超过三分之一的受访者(34%)表示，他们的隐私预算将在2023年增加.
而75%的受访者对其组织确保敏感数据隐私的能力充满信心, this confidence is declining—down six points from last year.
Staffing Shortages, Skills Gaps
When it comes to resources, 隐私工作人员的短缺依然存在，预计明年对技术和法律/合规职位的需求将会增加. Technical privacy roles remain more understaffed than legal/compliance roles, 53%的受访者表示，他们有些或严重人手不足, versus 44 percent, respectively. 调查还发现，许多澳门赌场官方下载都有隐私职位空缺(34%的澳门赌场官方下载表示技术隐私职位空缺，27%的澳门赌场官方下载表示法律/合规职位空缺)。. Additionally, 与法律/合规职位(62%)相比，技术隐私职位(69%)在明年的需求更有可能增加。.
大多数人还表示，填补职位空缺的时间与去年相比有所增加或保持不变, with 76 percent having the most difficulty hiring expert-level privacy professionals. 约五分之一的受访者表示，在他们的澳门赌场官方下载中，只有不到四分之一的隐私职位求职者符合这些职位的要求.
“组织可能希望遵守隐私法规，并通过设计建立隐私文化, but without a strong team of privacy practitioners, they face significant obstacles to achieving these goals,” says Safia Kazi, ISACA principal, privacy practices. “随着对这些私隐从业员的技术和法律专业知识的需求不断增加，以跟上监管格局的步伐, it is more important than ever to cultivate and train a strong, skilled privacy workforce to meet the demand.”
Taking Action
To fill this skills gap, 组织正在进行培训，允许非隐私员工进入隐私角色(49%)，并增加合同工或外部顾问的使用(38%)。.
受访者认为，最常见的隐私失败原因是缺乏培训(49%)。, data breach (42 percent), and not practicing privacy by design (42 percent). To tackle the most common cause of privacy failures, 85%的受访者表示，他们的组织为员工提供隐私意识培训, and 59 percent review and revise privacy awareness training at least annually. 尽管衡量培训效果最常用的指标是完成培训的员工数量(65%)，而不是隐私事件的减少(54%)。, 73%的人认为隐私培训对组织的隐私意识产生了积极影响.
“Privacy, like security, is best when it is baked in from the start, not fixed after the fact,” says Anne Toth, trust, privacy and tech policy advisor, and member of the ISACA Digital Trust Advisory Council. “这项研究强调并验证了许多从业人员从经验中了解到的事实:设计隐私是一项明智的投资，会在客户信任中获得回报.”To download a complimentary copy of the Privacy in Practice 2023 survey report, visit h94yjv.ttckx.com/privacy-month-2023. Information on ISACA’s Certified Data Privacy Solutions Engineer (CDPSE) certification, which demonstrates technical privacy skills, is available at h94yjv.ttckx.com/credentialing/certified-data-privacy-solutions-engineer. ISACA是一个非营利性、独立的专业协会，在188个国家拥有16.5万名澳门赌场官方软件. Members represent all areas of digital trust, including data privacy.
About ISACA
ISACA® (h94yjv.ttckx.com)是一个推动个人和组织追求数字信任的全球澳门赌场官方下载. For more than 50 years, ISACA has equipped individuals and enterprises with the knowledge, credentials, education, training and community to progress their careers, transform their organizations, and build a more trusted and ethical digital world. ISACA是一个全球性的专业协会和学习型组织，利用其超过165名澳门赌场官方软件的专业知识,000 members who work in digital trust fields such as information security, governance, assurance, risk, privacy and quality. It has a presence in 188 countries, including 225 chapters worldwide. Through its foundation One In Tech, ISACA为资源不足和代表性不足的澳门赌场官方下载提供信息技术教育和职业发展途径.
Twitter: www.twitter.com/ISACANews
LinkedIn: www.linkedin.com/company/isaca
Facebook: www.facebook.com/ISACAGlobal
Instagram: www.instagram.com/isacanews
Media Contacts
Bridget Drufke, bdrufke@ttckx.com, +1.847.660.5554
Emily Ayala, communications@ttckx.com, +1.847.385.7223
