ALL >> Computers >> View Article
Don’t Neglect Data Loss Prevention (dlp) For The Cloud
Total Articles: 35
There was a time when data loss prevention (DLP) efforts were focused on storage devices, email, and printing. However, now that you can take your device with you, in the form of a laptop or mobile phone, a lot more attention has been focused on devices themselves.
This makes sense as there are a ton of examples, from the US, but also from abroad of compliance fines for data that was lost via a laptop or mobile device. The mobile device management (MDM) industry has made significant strides in securing these mobile devices, which tend to get lost or stolen with almost no effort at all. But this leads to my fourth Cloud Data Security tip – look beyond devices and email and address DLP for the cloud.
The government can be relentless in prosecuting PCI, HIPAA, and HITECH compliance violations, regardless of how seemingly innocent the cause of the breach was. In both the examples hyperlinked above, the fined party lost the data because a laptop was stolen and the confidential data found within the device was not encrypted.
So, can you imagine how forgiving the government will be when a hospital uses Google spreadsheets to track patient information.
Not convinced this will happen to the cloud services you are using? Well it probably already has. For a beautiful and terrifying view into recent and remarkable data breaches, check out Information is Beautiful’s visualization of the worlds biggest data breaches. You’ll notice quite a few cloud services in there.
So what can you do? First you have identify all of the Cloud Security services your organization is using. Then you need to understand which data is going to which services. With this visibility you’ll be able to implement a targeted and realistic data loss prevention effort.
It doesn’t make sense to try and block or encrypt every piece of data going to every cloud service. So, you’ll want to use a trigger-based DLP process that identifies personally identifiable information, financial data, or confidential data that is heading to or living in the cloud. You’ll want the flexibility to either alert, encrypt, or block that data and you’ll want the flexibility to do this inline or offline.
Using this process, you’ll be able to prevent personally identifiable information (PII) and personal health information (PHI) from hitting the cloud unprotected – in doing so you protect your organization from IP leakage, compliance violations and fines, and the awful PR associated with being in next year’s annual data breaches report.
Lauren Ellis is a research analyst covering the technology industry’s top trends & topics, focusing on Cloud Security, Cloud Computing, data loss prevention etc.,
Computers Articles1. Avail It Connect Data Recovery Services To Restore Data From Failed Hard Drives
2. Import Data From Excel To Tally Erp 9 Easily
Author: Sanjay Jobanputra
3. Habits That You Need To Change While Working On A Computer
Author: Edward D Lemos
4. Easy To Use Accounting Software| File Vat Returns With Fta Approved Software- Perfonec
Author: Akansha Surana
5. How Does Mcafee On-demand Scanning Works?
Author: Maria Williams
6. How To Increase Life Of Ink Cartridges And Save Money?
Author: Jackson Perry
7. Microsoft Products Issues Troubleshooting Guide!24x7 Availability & Support.
Author: Joby Antony
8. Keep Your Private Life Private With Hide.me Vpn
Author: Jamie R Clarke
9. Usb Safeguard - Password Protection Software Usb Pen Drive
Author: Andrew Jordy
10. Craft Professional Drawings With Nanocad Plus
Author: Nick Giles
11. China’s Cyber Attacks On Taiwan Are Hard To Detect
Author: sara williams
12. What Is Logo Usbs Constructed Of?
Author: Magdalene Munter
13. Can I Check The Status Of My Dell Laptop Repair?
14. How To Fix Chrome High Disk Usage In Windows 10?
Author: bella watson
15. Novel Transmitter Secures Wireless Data From Cyber Criminals
Author: bella watson