"Because organizations don't have multifactor authentication rolled out, it makes it trivial to get in," says Chris Novak, director of global investigative response for Verizon, in a discussion about the company's latest Data Breach Digest, a companion report to the company's annual Data Breach Investigations report.

In an audio interview with Information Security Media Group at the recent RSA Conference 2017, Novak discusses:

• Nitty-gritty details of what organizations go through when they suffer a breach;
• Organizations' ongoing inability to know where their top assets are and on which systems that data gets stored, especially after merger and acquisition activity;
• The move by even non-European organizations to comply with the EU's General Data Protection Regulation.

Novak is a co-founder and the director of the Verizon Investigative Response Unit - a division of the Verizon RISK Team. He's also worked as a principal for Cybertrust and a senior security consultant for Ubizen." You can listen to the 10-minute interview here:

http://www.bankinfosecurity.com/interviews/verizon-most-breaches-trace-to-phishing-social-engineering-i-3516