Security Sense: How Responsible are Companies When Partners Lose Their Data?

Data breaches often as a result of an organisation’s partner losing customer information. Who’s ultimately responsible when this happens and would further checks and balances on the partner have stopped it from happening in the first place?