The Shift in the Value of Information: Why Cybersecurity Must Be Central to Every Project

Thirty years ago, information held value, but it was largely limited to sensitive data like commercial secrets or bank credentials. It was clear how criminals could exploit such data and why companies needed to protect it. Yet, the volume of this sensitive information was relatively small compared to the vast amount of data companies collect today – and many businesses still struggle to grasp its true value.

With the rapid development of technology, all information has become a commodity. Companies now gather extensive data on their customers, either to enhance products or monetize it through third parties. But the same data can also be leveraged by cybercriminals to create realistic virtual identities or orchestrate highly sophisticated phishing attacks.

As business analysis professionals, we need to rethink how we approach cybersecurity. It can no longer be treated as a non-functional requirement that’s added later in a project. Instead, it must be embedded into every stage of our work, from initial requirements gathering to final delivery. The earlier we consider security, the better we can safeguard both our systems and the valuable data they handle.

Cybersecurity knowledge is becoming an essential skill for every business analyst. I recently attended a workshop on this topic by Bindu Channaveerappa CBAP, CCA , and I highly recommend it. All information about her workshops you can find here: https://www.cybersecurityforbusinessanalysts.com/training.