The Australian Securities and Investments Commission (ASIC) yesterday released a Review of selected financial services groups’ compliance with the breach reporting obligation, which examined the breach reporting processes of 12 financial services groups, including the big four banks (ANZ, CBA, NAB and Westpac) and AMP.
The report was damning, finding that the major banks took an average time of 1,726 days (over 4.5 years) to identify significant breaches, whereas it took an average of 150 days from starting an investigation to lodging a breach report with ASIC:
