--- title: Strong Internal Controls and Audits Can Help Safeguard Against Data Breaches description: Machen McChesney assists business owners in implementing internal controls to reduce the risk of financial misstatements or fraud. image: https://info.machen.cpa/hubfs/Internal%20control%20-488305796-1.jpeg --- [Family of Services](http://machenmcchesney.com/about-us/family-of-companies/)  |  [CPA & Business Advisory](http://machenmcchesney.com)  |  [Payroll, HR & Benefits](http://focuspaysolutions.com/)  |  [Wealth Management](http://machenmcchesney.com/services/financial-planning-and-wealth-mangement-services/) Auburn-Opelika (334) 887-7022 | Montgomery (334) 244-8900 [![mm-re-cobrand-fd-blues](https://info.machen.cpa/hs-fs/hubfs/mm-re-cobrand-fd-blues.png?width=279&height=100&name=mm-re-cobrand-fd-blues.png)](http://machenmcchesney.com) Search this site on Google Search Google Search this site on Google Search Google - [Client Portal](https://machenmcchesney.sharefile.com/Authentication/Login) - [1040 Electronic Organizer](https://www.my1040data.com/account/login/HT7902990) - [LinkedIn](https://www.linkedin.com/company/675439?trk=tyah&trkInfo=idx%3A1-1-1%2CtarId%3A1424436970395%2Ctas%3Amachen+mcchesney) - [Facebook](https://www.facebook.com/machenmcchesney) - [Google](https://plus.google.com/101356546927388458481) - [Twitter](https://twitter.com/machenmcchesney) - About Us - [Welcome](http://machenmcchesney.com/about-us/welcome/) - [Affiliations and Associations](http://machenmcchesney.com/about-us/affiliations-and-associations/) - [Community Events](http://machenmcchesney.com/about-us/community-events/) - [Family of Companies](http://machenmcchesney.com/about-us/family-of-companies/) - [History](http://machenmcchesney.com/about-us/firm-profile-history/) - [Mission and Values](http://machenmcchesney.com/about-us/mission-and-values/) - [Team Directory](http://machenmcchesney.com/about-us/team-directory/) - Services - [Accounting & Outsourcing](http://machenmcchesney.com/services/accounting-outsourcing/) - [Audit and Assurance Services](http://machenmcchesney.com/services/audit-assurance/) - [Business Advisory Services](http://machenmcchesney.com/services/business-advisory/) - [Business Valuation Services](http://machenmcchesney.com/services/business-valuation-services/) - [Family Office Services](http://machenmcchesney.com/services/family-care/) - [Financial Planning & Wealth Mangement Services](http://machenmcchesney.com/services/financial-planning-and-wealth-mangement-services/) - [Individual Services](http://machenmcchesney.com/services/individuals/) - [Taxation](http://machenmcchesney.com/services/taxation/) - Who We Serve - [Construction & Real Estate](http://machenmcchesney.com/industries/construction-real-estate/) - [Credit Unions](http://machenmcchesney.com/industries/credit-unions/) - [Government & Not-For-Profits](http://machenmcchesney.com/industries/governmental-not-for-profit/) - [Healthcare & Professional Services](http://machenmcchesney.com/industries/healthcare-and-professional-services/) - [Hospitality, Restaurant & Retail](http://machenmcchesney.com/industries/hospitality-restaurant-retail/) - [Manufacturing, Distribution & Automotive](http://machenmcchesney.com/industries/manufacturing-distribution-automotive/) - [Success Stories](http://machenmcchesney.com/success-stories) - Resources - [Blog](https://info.machenmcchesney.com/blog) - [E-Newsletter Archive](http://machenmcchesney.com/resources/e-newsletter-archive/) - [Financial Calculators](http://machenmcchesney.com/resources/financial-calculators/) - [Financial Terms Glossary](http://machenmcchesney.com/resources/financial-terms-glossary/) - [Helpful Articles](http://machenmcchesney.com/resources/newsletter/) - [Tax Calendar](http://machenmcchesney.com/resources/tax-calendar/) - [Tax Links](http://machenmcchesney.com/resources/tax-links/) - [Track Your Refund](http://machenmcchesney.com/resources/track-your-refund/) - [Sign Up for Our E-Newsletter](http://machenmcchesney.com/resources/e-newsletter/) - [Subscribe to Our Blog](http://machenmcchesney.com/resources/subscribe-to-the-machen-mcchesney-blog/) - News & Events - [Press Releases](http://machenmcchesney.com/news-events/press-releases/) - [Upcoming Events](http://machenmcchesney.com/news-events/upcoming-events/) - Careers - [Our Culture](http://machenmcchesney.com/careers/culture/) - [Benefits](http://machenmcchesney.com/careers/benefits/) - [Our Stories](http://machenmcchesney.com/careers/our-stories/) - [Current Openings](http://machenmcchesney.com/careers/current-openings-send-resume/) - [Accounting Internship Opportunities](http://machenmcchesney.com/careers/students/) - Contact Us - [Auburn-Opelika Office](http://machenmcchesney.com/contact-us/contact-us-auburn-office/) - [Montgomery Office](http://machenmcchesney.com/contact-us/contact-us-montgomery-office/) # Returning Value Blog ## [Strong Internal Controls and Audits Can Help Safeguard Against Data Breaches](https://info.machen.cpa/blog/strong-internal-controls-and-audits-can-help-safeguard-against-data-breaches) Posted by [Melissa Motley, CPA](https://info.machen.cpa/blog/author/melissa-motley-cpa) on Sep 18, 2024, 10:11:21 AM - [Tweet](https://twitter.com/share) [![Internal control -488305796-1](https://info.machen.cpa/hs-fs/hubfs/Internal%20control%20-488305796-1.jpeg?width=1024&height=300&name=Internal%20control%20-488305796-1.jpeg)](https://info.machen.cpa/blog/strong-internal-controls-and-audits-can-help-safeguard-against-data-breaches)The average cost of a data breach has reached $4.88 million, up 10% from last year, according to a recent report. As businesses increasingly rely on technology, cyberattacks are becoming more sophisticated and aggressive, and risks are increasing. What can your organization do to protect its profits and assets from cyber threats? **Recent report**  In August 2024, IBM published “Cost of a Data Breach Report 2024.” The research, conducted independently by Ponemon Institute, covers 604 organizations that experienced data breaches between March 2023 and February 2024. It found that, of the 16 countries studied, the United States had the highest average data breach cost ($9.36 million). The report breaks down the global average cost per breach ($4.88 million) into the following four components: 1. $1.47 million for lost business (for example, revenue loss due to system downtime and costs related to lost customers, reputation damage and diminished goodwill), 2. $1.63 million for detection and escalation (such as forensic and investigative activities, assessment and audit services, crisis management, and communications to executives and boards), 3. $1.35 million for post-breach response (including product discounts, regulatory fines, legal fees, and costs related to setting up call centers and credit monitoring/identity protection services for breach victims), and 4. $430,000 for notifying regulators, as well as individuals and organizations affected by the breach. A silver lining from the report is that the average time to identify and contain a breach has fallen to 258 days from 277 days in the 2023 report, reaching a seven-year low. One key reason for faster detection and recovery is that organizations are giving more attention to cybersecurity measures. **Implementing cybersecurity protocols**  Cybersecurity is a process where internal controls are designed and implemented to: - Identify potential threats, - Protect systems and information from security events, and - Detect and respond to potential breaches. The increasing number of employees working from home exposes their employers to greater cybersecurity risk. Many companies now have sensitive data stored in more places than ever before — including laptops, firm networks, cloud-based storage, email, portals, mobile devices, and flash drives — providing many potential areas for unauthorized access. **Targeted data** When establishing new cybersecurity protocols and reviewing existing ones, it’s important to identify potential vulnerabilities. This starts by inventorying the types of employee and customer data that hackers might want to steal. This sensitive material may include: - Personally identifiable information, such as phone numbers, physical and email addresses, and Social Security numbers, - Protected health information, such as test results and medical histories, and - Payment card data. Companies need to have effective controls over this data to comply with their obligations under federal and state laws and industry standards. Hackers may also try to access a company’s network to steal valuable intellectual property, such as customer lists, proprietary software, formulas, strategic business plans, and financial data. These intangible assets may be sold or used by competitors to gain market share or competitive advantage. **Auditing cyber risks** No organization, large or small, is immune to cyberattacks. As the frequency and severity of data breaches continue to increase, cybersecurity has become a critical part of the audit risk assessment. Audit firms provide varying levels of guidance, both when assessing risk at the start of the engagement and when uncovering a breach that happened during the period under audit or audit fieldwork. **For more information on the above article or any [audit & assurance services](https://machen.cpa/services/audit-assurance/), contact Melissa Motley, CPA, at (334) 887-7022 or by leaving us a message below.**  Topics: [Audit & Assurance](https://info.machen.cpa/blog/topic/audit-assurance) Search this site on Google Search Google ### Recent Posts ### Subscribe to Blog ### Posts by Category - [Business Tax (356)](https://info.machen.cpa/blog/topic/business-tax) - [Business Advisory (239)](https://info.machen.cpa/blog/topic/business-advisory) - [Payroll, HR & Benefits (124)](https://info.machen.cpa/blog/topic/payroll-hr-benefits) - [Audit & Assurance (113)](https://info.machen.cpa/blog/topic/audit-assurance) - [Accounting & Outsourcing (81)](https://info.machen.cpa/blog/topic/accounting-outsourcing) - [Individual Tax (75)](https://info.machen.cpa/blog/topic/individual-tax) - [Tax Planning (33)](https://info.machen.cpa/blog/topic/tax-planning) - [Tax Updates (25)](https://info.machen.cpa/blog/topic/tax-updates) - [Retirement & Wealth Management Planning (18)](https://info.machen.cpa/blog/topic/retirement-wealth-management-planning) - [Taxation (15)](https://info.machen.cpa/blog/topic/taxation) - [Alerts (13)](https://info.machen.cpa/blog/topic/alerts) - [Business Valuation (11)](https://info.machen.cpa/blog/topic/business-valuation) - [News & Events (11)](https://info.machen.cpa/blog/topic/news-events) - [Tax News (11)](https://info.machen.cpa/blog/topic/tax-news) - [Individual Tax Planning (10)](https://info.machen.cpa/blog/topic/individual-tax-planning) - [Not For Profit (10)](https://info.machen.cpa/blog/topic/not-for-profit) - [Retirement Planning (9)](https://info.machen.cpa/blog/topic/retirement-planning) - [Estate Planning (8)](https://info.machen.cpa/blog/topic/estate-planning) - [Manufacturing Industry Insights (7)](https://info.machen.cpa/blog/topic/manufacturing-industry-insights) - [Individuals (1)](https://info.machen.cpa/blog/topic/individuals) - [Insider (1)](https://info.machen.cpa/blog/topic/insider) - [Professional Standard News (1)](https://info.machen.cpa/blog/topic/professional-standard-news) see all [![Returning\_Value](https://info.machen.cpa/hs-fs/file-2504250850-jpg/Machen-Blog-Image/Returning_Value.jpg)](http://machenmcchesney.com/about-us/mission-and-values/) - [![AICPA](https://machenmcchesney.com/img/logos/aicpa.jpg)](https://www.aicpa-cima.com/) - [![NACVA](https://machenmcchesney.com/img/logos/nacva.jpg)](http://www.nacva.com/) - ![2026 INSIDE Public Accounting Top 400](https://machenmcchesney.com/img/2026-ipa-top-400.jpg) - ![2026 Best of Auburn-Opelika](https://machenmcchesney.com/img/2026-best-of-auburn-opelika.jpg) - [![2025 Best of OA](https://machenmcchesney.com/img/2025-best-of-oa.jpg)](https://oanow.com/exclusive/readerschoice/ballot-2025/) - ![2026 Best of OA Winner](https://machenmcchesney.com/img/2026-best-of-oa-winner.jpg) - [![2025 Accounting Today Regional Leaders](https://machenmcchesney.com/img/2025-accounting-today-regional-leaders.jpg)](https://www.accountingtoday.com/) - [![ClearlyRated Best of Accounting](https://machenmcchesney.com/img/2024-best-of-accounting.jpg)](https://www.clearlyrated.com/accounting) - [![ClearlyRated Best of Accounting Employee](https://machenmcchesney.com/img/2024-best-of-accounting-employee.jpg)](https://www.clearlyrated.com/accounting) 1820 East University Drive, Auburn, AL 36830 | Tel: (334) 887-7022 | Fax: (334) 887-7221 1761 Taliaferro Trail, Montgomery, AL 36117 | Tel: (334) 244-8900 | Fax: (334) 364-0927 † This is not a CPA firm. \* Assurance, attest, and audit services provided by Frazier & Deeter, LLC. “Frazier & Deeter” is the brand name under which Frazier & Deeter, LLC\* and Frazier & Deeter Advisory, LLC† and its subsidiary entities provide professional services. Frazier & Deeter, LLC\* and Frazier & Deeter Advisory, LLC (and its subsidiary entities)† practice as an alternative practice structure in accordance with the AICPA Code of Professional Conduct and applicable law, regulations and professional standards. Frazier & Deeter, LLC\* is a U.S. licensed independent public accounting firm that provides attest services to its clients. Frazier & Deeter Advisory, LLC† and its subsidiary entities provide tax and business consulting services to their clients. Frazier & Deeter Advisory, LLC† and its subsidiary entities are not licensed U.S. CPA firms. - [LinkedIn](https://www.linkedin.com/company/675439?trk=tyah&trkInfo=idx%3A1-1-1%2CtarId%3A1424436970395%2Ctas%3Amachen+mcchesney) - [Facebook](https://www.facebook.com/machenmcchesney) - [Google](https://plus.google.com/101356546927388458481) - [Twitter](https://twitter.com/machenmcchesney) [Powered by Strategic 7 Marketing](https://strategicseven.com)