Philippines companies urged to standardize cyber defenses across branches

Traders Union
All News
Business & Wealth
Companies
Standardize cyber defenses in Philippines

Highlights

ManageEngine urges Philippines companies to standardize cybersecurity policies across branches while adapting training to local threat patterns, citing awareness gaps from 53.6% in Metro Manila to 6.5% in Bangsamoro.
Artificial intelligence is increasing the sophistication of phishing and identity-theft attacks, prompting recommendations for advanced monitoring and automated detection systems to contain breaches early.
Companies must fulfill Philippines' 72-hour breach notification requirement, and underreporting often signals monitoring weaknesses, emphasizing the importance of rapid detection tools and automated incident response mechanisms.

Uniform standards and regional adaptation

As reported by BusinessWorld Online, ManageEngine says companies operating nationwide should treat cybersecurity as a shared organizational culture and apply policies consistently across all offices.

Subhalakshmi Ganapathy, chief IT security evangelist at ManageEngine, says headquarters and regional branches typically follow similar work cultures and business processes, so cybersecurity should also be adopted from the ground level in the same way. She says companies should keep uniform security standards across locations while adjusting training and monitoring programs to reflect local threat patterns.

Her comments come amid wide regional differences in cybersecurity awareness in the Philippines. Citing Philippine Statistics Authority data, she says awareness reaches 53.6% in Metro Manila but only 6.5% in the Bangsamoro Autonomous Region in Muslim Mindanao.

Ganapathy says organizations should continuously update employee training based on evolving threats identified by security operation centers. She adds that companies should assume some employees will eventually fall victim to increasingly sophisticated attacks, making response readiness as important as prevention.

Monitoring gaps raise breach risks

Ganapathy says artificial intelligence is enabling attackers to create more convincing phishing messages, identity-theft campaigns and account takeover attempts that are harder for users to detect. Instead of relying only on awareness programs, she says companies should invest in monitoring systems that can identify suspicious behavior and contain breaches before data is stolen.

Under the Philippines' Data Privacy Act of 2012, organizations must notify the National Privacy Commission and affected individuals within 72 hours of discovering or reasonably believing that a personal data breach has occurred. Ganapathy says underreporting often reflects a failure to detect attacks quickly rather than a deliberate lack of transparency.

She urges companies to deploy user-behavior analytics and automated detection tools to flag unusual internal activity and speed up incident response. Organizations should also establish automated response mechanisms that can isolate affected devices or lock compromised accounts before investigations are completed, she says.

Ganapathy says cyberattacks can damage customer trust and corporate reputation beyond the immediate operational disruption caused by a breach. She adds that businesses should weigh those potential costs when assessing investments in cybersecurity staff, processes and technology.

Our earlier article on Q3 2026 cybersecurity funding highlighted how global cybersecurity and privacy startups raised $6.8 billion as investors concentrated capital into fewer but much larger late-stage rounds, especially in AI-driven and identity security. We also noted an uptick in consolidation, with major acquisitions underscoring how companies are scaling tools for fraud prevention and breach detection as AI-related risks accelerate.

This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.