|
Data protection programs at most organizations are concerned with protecting sensitive data from external malicious attacks, relying on technical controls that include perimeter security, network/wireless surveillance and monitoring, application and point security management, and user awareness and education. But what about inadvertent data leaks that aren’t so sensational, for example unencrypted information on a lost or stolen laptop/USB or other device? Like the steady drip from a leaking faucet, everyday data leaks are making headlines more often than the nefarious attack scenarios around which organizations plan most, if not all, of their data leakage prevention methods. However, to truly protect their critical data, organizations also need to plan a more data-centric approach to their security programs to protect against leaks that occur everywhere sensitive data lives, rests or is used. In this paper, the different leakage points are mapped with regulations and best practices. |
