Data and Security

Growing data has become one of the most important assets for any organization and with this comes the huge responsibility of managing, securing, or protecting this data. Malfunction or corruption in this data may impact intellectual property (IP), a customer’s personal information, and financial information of the customers or company.

Different regulatory guidelines, like PCI DSS, GDPR, HIPAA, and others are playing a vital role in making our data more secure but we must also have a vision of protecting the data to avoid damages on several levels to a company, including exposure to possible financial penalties and reputational risks.

Data exists in three states which are at rest, in use, and in motion. We cannot compromise with the data in any of the given states. Before getting ahead let us understand what are these data states.

Data at rest: In this Data is not actively moving from one network or endpoint to another.

Data in use: This is the active data that is stored in RAM, CPU Cache, CPU registers, DB etc. it must be accessible to those who need it with a proper access control list.

Data in motion: It is also referred to as data in transit, in this data is transferred between locations either within or between systems. Data in motion can be data sent from on premises to cloud, portable devices, or other endpoints. Once the data arrives at its final destination, it becomes data at rest.

Data in motion has to contend with a wide range of threats, including network failures, human error, malicious actions, insecure file sharing, and more. What organizations need to keep in mind is that the benefits of improved productivity, availability, and flexibility shouldn’t come at the cost of security and data protection.

So when planning for Data security we should have core discussion on below parameters.

·        -  Implement robust network security controls

·        - Create policies for systematically categorizing

·        -  Identify critical assets and vulnerabilities

·        -  Define security framework for data

·        -  Implement technologies and processes

Thanks for reading…..

 

Keeping Learning….. Keep Sharing…. Keep Growing…..

 

With regards,

Sayed