The digital business environment brings tremendous opportunity — along with the risk of data breaches targeting important business data assets. This data is an essential component of decision-making, ongoing operations, market competitiveness and regulatory compliance.

With so much value contained in business data, threats and attacks on an enterprise’s “crown jewels” have become more sophisticated and targeted. Enterprises must apply adequate data protection for data security measures in order to secure intellectual capital, mitigate risks, deter attacks and comply with requirements.

Companies that fail to make data protection an everyday priority run the risk of losing money, losing business and destroying their reputations. Unlike traditional crown jewels locked securely in a safe, the value of critical data is realized through access and exchange.

Given the cultural drivers of information security risk, how can organizations be more effective in addressing the spectrum of cyberthreats that exist today? Data security requires a calculated, holistic and dynamic combination of business process and technology. Critical data often exists across several lines of business and must be accounted for by multiple business stakeholders.

In addition to the expertise and knowledge of the IT security team, a critical data security program must incorporate the needs and viewpoints of other lines of business, including marketing, sales, finance and supply chain operations, starting with the identification and classification of the highest-value data vital to the enterprise’s survival.

Data Security Requires Security Intelligence

When it comes to data security, enterprises often build their own roadblocks from being IT-centric to risk-averse. Even worse are enterprises that equate being compliant with being secure. The following are three basic questions an enterprise should have a detailed knowledge of when considering adequate data security:

  1. Where is it stored?
  2. Who uses it?
  3. How is it protected?

Critical data is often fluid and reflective of the data life cycle — created, stored, consumed or destroyed. A critical data protection strategy is data-centric and does not rely on the most recent security implementation to protect the crown jewels. It is a holistic view of data risk that thoughtfully considers threats, ranging from trusted insiders to cybercriminals to competitors, in a data environment made more complex by mobility, big data, social media, the cloud and virtual computing. An effective critical data protection program must embrace data-centric security as a core model against a changing data threat landscape.

To learn more about data security and strategies for protecting you company’s crown jewels, see my presentation from IBM InterConnect 2015.

More from Data Protection

Data Privacy: How the Growing Field of Regulations Impacts Businesses

The proposed rules over artificial intelligence (AI) in the European Union (EU) are a harbinger of things to come. Data privacy laws are becoming more complex and growing in number and relevance. So, businesses that seek to become — and stay — compliant must find a solution that can do more than just respond to current challenges. Take a look at upcoming trends when it comes to data privacy regulations and how to follow them. Today's AI Solutions On April…

Defensive Driving: The Need for EV Cybersecurity Roadmaps

As the U.S. looks to bolster electric vehicle (EV) adoption, a new challenge is on the horizon: cybersecurity. Given the interconnected nature of these vehicles and their reliance on local power grids, they’re not just an alternative option for getting from Point A to Point B. They also offer a new path for network compromise that could put drivers, companies and infrastructure at risk. To help address this issue, the Office of the National Cyber Director (ONCD) recently hosted a…

Why Quantum Computing Capabilities Are Creating Security Vulnerabilities Today

Quantum computing capabilities are already impacting your organization. While data encryption and operational disruption have long troubled Chief Information Security Officers (CISOs), the threat posed by emerging quantum computing capabilities is far more profound and immediate. Indeed, quantum computing poses an existential risk to the classical encryption protocols that enable virtually all digital transactions. Over the next several years, widespread data encryption mechanisms, such as public-key cryptography (PKC), could become vulnerable. Any classically encrypted communication could be wiretapped and is…

How the CCPA is Shaping Other State’s Data Privacy

Privacy laws are nothing new when it comes to modern-day business. However, since the global digitization of data and the sharing economy took off, companies have struggled to keep up with an ever-changing legal landscape while still fulfilling their obligations to protect user data. The challenge is that there is no one-size-fits-all solution regarding data privacy's legal requirements. Depending on the location and jurisdiction, data privacy laws can vary significantly in terms of scope and enforcement. But while the laws…