Intelligent CISO Issue 01 | Page 57

destruction . Companies must further take measures to identify risks , maintain safeguards against such risks and ensure that these safeguards are continually updated in response to new risks .
In Europe , the General Data Protection Regulation ( GDPR ) becomes enforceable from May 25 , requiring data protection ‘ by design and by default ’, in addition to the right to access and the right to erasure among others . Non-compliance can result in significant fines – 4 % of global revenue or € 20 million , whichever is greater – as well as the possible accompanying reputational loss .
In a growing number of countries , data privacy regulation now stipulates where data must be stored , presenting organisations with additional challenges .
Or the benefits of public cloud . In many cases it will be a hybrid model with a mix of public and private cloud solutions for different systems and applications . Ensuring regulatory compliance is a long-term commitment and investment in implementing a cost-effective supporting infrastructure might even represent one of the biggest opportunities for companies to accelerate digital transformation in recent years .
Education and automation
With security at the core of a modern organisation , good governance for managing systems and people effectively is critical . Strong authentication and encryption becomes a necessity . Backup , archiving and storage helps to further protect against ransomware and mobile device management becomes an instrumental means of controlling information at the edge .
It is also not just about the technology . Industry estimates put nearly half of all security breaches down to human error and educating employees on how to spot suspicious emails can help cut down on phishing , whaling and other attacks that rely on unsuspecting end-users to click on links to infected websites , or open attachments that install malware or ransomware .
Migrating to the cloud
In addition to the right to access , right to erasure and data portability , one of the key legislative requirements of GDPR is to be able to provide any individual with every piece of data an organisation holds on them , including all data records and any activity logs that may be stored .
This places the focus firmly on good data management , with the benefits being increased security and operational efficiency , to improved customer service . By turning to cloud computing at the infrastructure , platform and software level , businesses gain the ability to
extract , collate and analyse data at incredible volumes and speed – even from across previously disparate systems – to ensure compliance .
In a growing number of countries , data privacy regulation now stipulates where data must be stored , presenting organisations with additional challenges . However , the availability of innovative managed ‘ cloud at customer ’ solutions now gives customers transparency and the choice of having their workloads in a private cloud with all the benefits of stability and real time updates yet keeping critical information and applications within their own building .
However , the very advances in technologies that enable the threats are also providing companies with the tools that are required to combat them . Using machine learning and AI techniques , autonomous operations will anticipate outcomes , take remedial action and be aware of real-time risks . Databases with autonomous auto-tuning and patching capabilities are already on the market , helping combat cyberthreats resulting from human error , without it having to be shut down or taken offline . By 2025 , 80 % of cloud operations risk will vanish entirely and more intelligent automation will permeate the cloud platform , becoming the catalyst that further accelerates enterprise cloud adoption . u
intelligent CLOUD SECURITY
www . intelligentciso . com |
Issue 01
57