The security of data and business IT has never been a more pressing issue. Following the introduction of the EU General Data Protection Regulation (GDPR) in 2018, any company that falls foul of a data breach will now face fines of up to €20 million or 4 per cent of its annual turnover. Just this September, British Airways received a hefty fine of £183 million after the personal data of 500,000 of its customers was leaked from their company website and mobile app.
These GDPR fines serve as a stark reminder that businesses must enforce stringent IT security policies to remain compliant with new data and IT security regulations and prevent cyberattacks, not only to boost business longevity, but also profitability.
Whilst this may be the case, alarmingly, a recent study revealed that 74 per cent of corporate data breaches occurred because of abuse or misuse of internal password credentials for secure company accounts. This shows that cyber-attackers are increasingly accessing corporate networks using weak, stolen, or otherwise compromised credentials. Therefore, it’s more important than ever for businesses to ensure only the appropriate staff can access their devices, offices and networks, particularly in high-risk industries, such as finance, banking, insurance or data providers.
Passwords aren’t enough
It has long been apparent that passwords are outdated and no longer adequate to protect a business’ IT infrastructure and data assets. Now, we are starting to see the continued use of this insufficient mode of authentication putting consumer data at risk and costing businesses money.
To resolve this, companies must move towards more heightened security measures, such as using employees’ physical identities and biometric data to authenticate entry to corporate buildings, networks and devices. Fingerprint biometrics, by nature, are personal to the individual and can’t be replicated, making them the perfect proof of identity to authenticate user access within business environments.
Managing access to smart buildings and smart devices
Once, gaining access to an organisation’s headquarters through hand or fingerprint scanning seemed like something only needed for top-secret offices such as MI5, or in Mission Impossible films. However, thanks to the increasing amount of data stored on company servers, it is becoming a necessity for most organisations to secure their offices and data centres. This will help protect not only private information, but also the personal details their customers have entrusted them with.
The use of fingerprint biometrics to manage employee access to corporate buildings has already started to emerge. In physical security, fingerprint biometric sensors are currently being used for access control, authentication and employee verification to enter offices and secure data centres. Unlike simple swipe cards and PIN codes, your fingerprint can’t be dropped in the canteen, or shared with a colleague, making them a valuable tool for physical security.
On top of this, when you combine physical security checks with devices and digital security, it results in an end-to-end encryption technology that can work across the organisation, ensuring secure access to both physical assets and valuable digital information.
Furthermore, as we move towards a future where smart buildings appear in our neighbourhoods, biometric fingerprint authentication can also become a valuable and convenient tool to ensure secure access to schools, hospitals and homes.
- Powerfully personal: the role of fingerprint biometric technology in the digital identity security crisis
Protecting data with fingerprint access
It’s not just building access that can benefit from biometric authentication, but there’s an opportunity to link biometric authentication across physical and virtual IT security.
Fingerprint biometric sensors can also be incorporated into IT devices to manage access to corporate networks, for example. While Apple only introduced the first iPhone fingerprint sensor in 2012, today it is considered the norm to access our smartphone through a secure, quick and easy fingerprint scan. Similarly, this secure method of validation will soon be considered standard for company devices, from tablets and phones to laptops to desktops.
To achieve this on company desktops, which often never leave the premises, fingerprint scanners can be embedded into keyboards. This confirms that only the approved employee can access the device, the corporate network, and secure data.
Reducing the threat of data breaches
The rate of data breaches is far from slowing down and it is becoming increasingly crucial for businesses of all sizes to protect themselves against potential threats. To do so, organisations must act now to protect their corporate offices, devices and networks.
Where passwords and swipe cards pose gaping security holes for businesses, innovations such as biometric technology hold the key to measurable and reliable access. By enabling the right employees to log in to their devices or access secure networks via their fingerprint, companies can be certain that their data is secure. Biometric fingerprint technology when used alongside IT security will help support a greater defence against the growing threat of data breaches. Meaning that companies can be safe in the knowledge that the right people can gain access to the right information.
David Orme, Senior Vice President, IDEX Biometrics ASA