OPENSPACE 23: The Satellites that Are Shaping Our Future | Page 5

02 03 When managing sensitive information, there are three essential foundations: 1 2 3 Understand your data. Before implementing the necessary security policies and communicating them to employees, understand what data need to be protected and create a Data Classification Policy that will differentiate data based on their sensitivity level. Secure your data. Make sure that all categories of data are handled properly and set policies to manage the information consistently. Data considered sensitive has to be encrypted, and technical 04 controls need to be set up to enforce privacy requirements. Train your employees. Human vulnerabilities continue to be one of the main data security threats for public and private organizations. Educating every member of the organization about the significance of sensitive data is essential. Employees need to understand the sensitivity of the data they handle and their role in keeping it safe. “The first step to secure sensitive information is to determine its origin, ownership, nature, sensitivity, classification levels, and conditions of access, as well as any related threats and risks.” Gerry Deneault RHEA Inc. Vice President, Business Development January - April 2017 05