ALL >> Computers >> View Article
Don’t Neglect Data Loss Prevention (dlp) For The Cloud
Total Articles: 35
There was a time when data loss prevention (DLP) efforts were focused on storage devices, email, and printing. However, now that you can take your device with you, in the form of a laptop or mobile phone, a lot more attention has been focused on devices themselves.
This makes sense as there are a ton of examples, from the US, but also from abroad of compliance fines for data that was lost via a laptop or mobile device. The mobile device management (MDM) industry has made significant strides in securing these mobile devices, which tend to get lost or stolen with almost no effort at all. But this leads to my fourth Cloud Data Security tip – look beyond devices and email and address DLP for the cloud.
The government can be relentless in prosecuting PCI, HIPAA, and HITECH compliance violations, regardless of how seemingly innocent the cause of the breach was. In both the examples hyperlinked above, the fined party lost the data because a laptop was stolen and the confidential data found within the device was not encrypted.
So, can you imagine how forgiving the government will be when a hospital uses Google spreadsheets to track patient information.
Not convinced this will happen to the cloud services you are using? Well it probably already has. For a beautiful and terrifying view into recent and remarkable data breaches, check out Information is Beautiful’s visualization of the worlds biggest data breaches. You’ll notice quite a few cloud services in there.
So what can you do? First you have identify all of the Cloud Security services your organization is using. Then you need to understand which data is going to which services. With this visibility you’ll be able to implement a targeted and realistic data loss prevention effort.
It doesn’t make sense to try and block or encrypt every piece of data going to every cloud service. So, you’ll want to use a trigger-based DLP process that identifies personally identifiable information, financial data, or confidential data that is heading to or living in the cloud. You’ll want the flexibility to either alert, encrypt, or block that data and you’ll want the flexibility to do this inline or offline.
Using this process, you’ll be able to prevent personally identifiable information (PII) and personal health information (PHI) from hitting the cloud unprotected – in doing so you protect your organization from IP leakage, compliance violations and fines, and the awful PR associated with being in next year’s annual data breaches report.
Lauren Ellis is a research analyst covering the technology industry’s top trends & topics, focusing on Cloud Security, Cloud Computing, data loss prevention etc.,
Computers Articles1. Want To Buy Computer Keyboard? Some Tips Which Will Assist You In Buying The Best
2. Fast Solutions For Issues At Xbox 360 Repair Service Leeds
Author: Tony Blair
3. Quick Fixes For Issues At Sony Service Centre Uk
Author: Tony Blair
4. Hard Drive Clicking
5. Why Do You Need To Buy Windows 7?
6. Get A Microsoft Office 2016 Upgrade At Software Base!
7. Essential Reasons To Consider Microsoft Office 2016 Upgrade
8. Buy Windows Vista Online And Enjoy All Its Advantages
9. Buy Windows 8 Online Now To Upgrade Your Existing Pc
10. Issues & Fixes For Playstation 4 Repair Leeds
Author: Tony Blair
11. Buy Windows 7 Home Premium Online Perfect For Day-to-day Usage Of Pc
12. Buy Microsoft Products London At Software Base!
13. Buy Microsoft 2013 To Do Your Best In Everything
14. Buy Microsoft 2010 To Enjoy All Its Key Benefits
15. Bulk Text Sms Message Reseller Traitsider