ALL >> Computers >> View Article
Don’t Neglect Data Loss Prevention (dlp) For The Cloud
Total Articles: 35
There was a time when data loss prevention (DLP) efforts were focused on storage devices, email, and printing. However, now that you can take your device with you, in the form of a laptop or mobile phone, a lot more attention has been focused on devices themselves.
This makes sense as there are a ton of examples, from the US, but also from abroad of compliance fines for data that was lost via a laptop or mobile device. The mobile device management (MDM) industry has made significant strides in securing these mobile devices, which tend to get lost or stolen with almost no effort at all. But this leads to my fourth Cloud Data Security tip – look beyond devices and email and address DLP for the cloud.
The government can be relentless in prosecuting PCI, HIPAA, and HITECH compliance violations, regardless of how seemingly innocent the cause of the breach was. In both the examples hyperlinked above, the fined party lost the data because a laptop was stolen and the confidential data found within the device was not encrypted.
So, can you imagine how forgiving the government will be when a hospital uses Google spreadsheets to track patient information.
Not convinced this will happen to the cloud services you are using? Well it probably already has. For a beautiful and terrifying view into recent and remarkable data breaches, check out Information is Beautiful’s visualization of the worlds biggest data breaches. You’ll notice quite a few cloud services in there.
So what can you do? First you have identify all of the Cloud Security services your organization is using. Then you need to understand which data is going to which services. With this visibility you’ll be able to implement a targeted and realistic data loss prevention effort.
It doesn’t make sense to try and block or encrypt every piece of data going to every cloud service. So, you’ll want to use a trigger-based DLP process that identifies personally identifiable information, financial data, or confidential data that is heading to or living in the cloud. You’ll want the flexibility to either alert, encrypt, or block that data and you’ll want the flexibility to do this inline or offline.
Using this process, you’ll be able to prevent personally identifiable information (PII) and personal health information (PHI) from hitting the cloud unprotected – in doing so you protect your organization from IP leakage, compliance violations and fines, and the awful PR associated with being in next year’s annual data breaches report.
Lauren Ellis is a research analyst covering the technology industry’s top trends & topics, focusing on Cloud Security, Cloud Computing, data loss prevention etc.,
Computers Articles1. Laptop Screen Repair Nottingham – Lenovo Repairer
2. Online Software Testing Course
Author: Mind Q Online
3. Why Small And Medium Businesses Need It Consultants
4. 6 Ios Apps Social Media Online Marketers Will Like
Author: Vicky Manzi
5. Top 4 Benefits Of Having A Mobile App For Your Business
Author: Allie Laine
6. Way To Become High Skilled Professional In Software Testing
Author: Mind Q Systems
7. How The Interactive Presentation Is Useful For Corporate Platform Scenario?
Author: Amit Sahoo
8. Techniques Making Your Life Easier With The Iphone
Author: Ramon Turman
9. The All New Android Emulator
Author: Kattie August
10. How To Backup Current Settings Before Upgrading Android Homescreen
Author: Archie Carroll
11. How The Power Of Infogrpahics With Infographics Maker Offers The Best Exposure?
Author: Amit Sahoo
12. Android Apps Top 3 For Students And Teachers
Author: Sabrina Goodchap
13. A Thorough Survey Before Buying Computer And Accessories Online
Author: Tapu Goswami
14. 5 Remarkable Iphone Apps Redesigned For Android
Author: Tamela Goldfarb
15. Ebooks For Sale For Android Tablets
Author: Syreeta Mccune