Intelligent SME.tech Issue 14 | Page 12

// LATEST INTELLIGENCE //

FIVE COMMON DATA SECURITY PITFALLS TO AVOID

PRESENTED BY ompliance doesn ’ t necessarily

C equal security . Organizations that focus their limited security resources to comply with an audit or certification can become complacent . Many large data breaches have happened in organizations that were fully compliant on paper . The following examples show how focusing solely on compliance can diminish effective security :

Incomplete coverage
Enterprises often scramble to address database misconfigurations and outdated access polices prior to an annual audit . Vulnerability and risk assessments should be ongoing activities .
Minimal effort
Many businesses adopt data security solutions just to fulfill legal or business partner requirements . This mindset of “ let ’ s implement a minimum standard and get back to business ” can work against good security practices . Effective data security is a marathon not a sprint .
Fading urgency
Businesses can become complacent towards managing controls when regulations , such as the Sarbanes-Oxley Act ( SOX ), the General Data Protection Regulation ( GDPR ), and California Consumer Privacy Act ( CCPA ), mature . While , over time , leaders can be less considerate about the privacy , security and protection of regulated data , the risks and costs associated with noncompliance remain .
Omission of unregulated data
Assets , such as intellectual property , can put your organization at risk if lost or shared with unauthorized personnel . Focusing solely on compliance can result in security organizations overlooking and under protecting valuable data . �
12 intelligent
. tech
Intelligent SME . tech