February 20, 2015 By Shawn Hennessy 2 min read

The digital business environment brings tremendous opportunity — along with the risk of data breaches targeting important business data assets. This data is an essential component of decision-making, ongoing operations, market competitiveness and regulatory compliance.

With so much value contained in business data, threats and attacks on an enterprise’s “crown jewels” have become more sophisticated and targeted. Enterprises must apply adequate data protection for data security measures in order to secure intellectual capital, mitigate risks, deter attacks and comply with requirements.

Companies that fail to make data protection an everyday priority run the risk of losing money, losing business and destroying their reputations. Unlike traditional crown jewels locked securely in a safe, the value of critical data is realized through access and exchange.

Given the cultural drivers of information security risk, how can organizations be more effective in addressing the spectrum of cyberthreats that exist today? Data security requires a calculated, holistic and dynamic combination of business process and technology. Critical data often exists across several lines of business and must be accounted for by multiple business stakeholders.

In addition to the expertise and knowledge of the IT security team, a critical data security program must incorporate the needs and viewpoints of other lines of business, including marketing, sales, finance and supply chain operations, starting with the identification and classification of the highest-value data vital to the enterprise’s survival.

Data Security Requires Security Intelligence

When it comes to data security, enterprises often build their own roadblocks from being IT-centric to risk-averse. Even worse are enterprises that equate being compliant with being secure. The following are three basic questions an enterprise should have a detailed knowledge of when considering adequate data security:

  1. Where is it stored?
  2. Who uses it?
  3. How is it protected?

Critical data is often fluid and reflective of the data life cycle — created, stored, consumed or destroyed. A critical data protection strategy is data-centric and does not rely on the most recent security implementation to protect the crown jewels. It is a holistic view of data risk that thoughtfully considers threats, ranging from trusted insiders to cybercriminals to competitors, in a data environment made more complex by mobility, big data, social media, the cloud and virtual computing. An effective critical data protection program must embrace data-centric security as a core model against a changing data threat landscape.

To learn more about data security and strategies for protecting you company’s crown jewels, see my presentation from IBM InterConnect 2015.

More from Data Protection

3 Strategies to overcome data security challenges in 2024

3 min read - There are over 17 billion internet-connected devices in the world — and experts expect that number will surge to almost 30 billion by 2030.This rapidly growing digital ecosystem makes it increasingly challenging to protect people’s privacy. Attackers only need to be right once to seize databases of personally identifiable information (PII), including payment card information, addresses, phone numbers and Social Security numbers.In addition to the ever-present cybersecurity threats, data security teams must consider the growing list of data compliance laws…

How data residency impacts security and compliance

3 min read - Every piece of your organization’s data is stored in a physical location. Even data stored in a cloud environment lives in a physical location on the virtual server. However, the data may not be in the location you expect, especially if your company uses multiple cloud providers. The data you are trying to protect may be stored literally across the world from where you sit right now or even in multiple locations at the same time. And if you don’t…

From federation to fabric: IAM’s evolution

15 min read - In the modern day, we’ve come to expect that our various applications can share our identity information with one another. Most of our core systems federate seamlessly and bi-directionally. This means that you can quite easily register and log in to a given service with the user account from another service or even invert that process (technically possible, not always advisable). But what is the next step in our evolution towards greater interoperability between our applications, services and systems?Identity and…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today