Data Protection
Data protection is about ensuring people can trust you to use their data fairly and responsibly. If you collect information about individuals for any reason other than your own personal, family or household purposes, you need to comply.
Steps to Ensure Data Privacy
• Lawfulness, fairness and transparency.
• Purpose limitation.
• Data minimisation.
• Accuracy.
• Storage limitation.
• Integrity and confidentiality (security)
• Accountability.
Steps to Ensure Data Privacy
1.Limit and protect the information you collect on customers.
2. Use state-of-the-art encryption methods.
3. Focus on building trust for the long-term.
4. Be transparent regarding data privacy.
5. Make it convenient for your customers.
6. Train employees regarding data privacy.
Data Loss Prevention (DLP)
Data loss prevention (DLP) is a strategy for making sure that end users do not send sensitive or critical information outside the corporate network. … Adoption of DLP is being driven by insider threats and by more rigorous state privacy laws, many of which have stringent data protection or access components.
i. Database Security
Today businesses use various databases depending on their multiple, diverse needs. On top of that, companies have databases hosted in the cloud and on-premises. Database security covers and enforces security on all aspects and components of databases. This includes: Data stored in database, Database server, Database management system (DBMS) and other database workflow applications.
ii. Data Encryption
Encryption is the conversion of electronic data into another form, called ciphertext, which cannot be easily understood by anyone except authorized parties.
Data Classification
Data Classification is broadly defined as the process of organizing data by relevant categories so that it may be used and protected more efficiently. On a basic level, the classification process makes data easier to locate and retrieve. Data classification is of particular importance when it comes to risk management, compliance, and data security.
Identity & Access Management:
Network Access Control (NAC)
Network access Control solution support network visibility and access management through policy enforcement on devices and users of corporate networks. With organizations now having to account for exponential growth of mobile devices accessing their networks and the security risks they bring, it is critical to have the tools that provide the visibility, access control, and compliance capabilities that are required to strengthen your network security infrastructure
Multi-factor Authentication (MFA)
Multi-factor Authentication is a method of confirming a user’s claimed identity in which a user is granted access only after successfully presenting 2 or more pieces of evidence (or factors) to an authentication mechanism.
Privileged Access Management (PAM)
Privileged access management can be defined as managing, auditing and providing data access visibility by privileged users. Privileged Access Management solution provides analysis, key findings, and recommendations to help organizations secure, manage, and monitor privileged accounts and access.
End Point Security (EDR)
End-Point Detection and Response (EDR) refers to securing endpoints, or end-user devices like desktops, laptops, and mobile devices. Endpoints serve as points of access to an enterprise network and create points of entry that can be exploited by malicious actors. Endpoint security software protects these points of entry from risky activity and/or malicious attack.
Web Application Security (WAF)
Web Application Firewall (WAF) is an Information Security solution that deals specifically with security of websites, web applications and web services. At a high level, Web application security draws on the principles of application security as defined by best practice bodies such as OWASP which are then applied to Internet and Web systems.
i. Vulnerability Management
Vulnerability management is the “cyclical practice of identifying, classifying, remediating, and mitigating vulnerabilities”, within the organization’s information assets. Vulnerability management is integral to computer security and network security.
ii. User Behavior Analytics (UBA)
User behavior analytics (UBA) is a cybersecurity process regarding the detection of insider threats, targeted attacks, and financial fraud that tracks a system's users. UBA looks at patterns of human behavior, and then analyzes them to detect anomalies that may indicate potential threats
Threat Intelligence & Continuous Monitoring (SIEM & SOC)
Security information and event management (SIEM) is an approach to security management that combines SIM (security information management) and SEM (security event management) functions into one security management system. SIEM provides real-time analysis of security alerts generated by applications and network hardware.
Threat intelligence is a solution for analyzing and managing adversaries and threats throughout the incidence lifecycle from indicator to attacker management whilst providing attribution and enrichment of all respective data that could affect your business.
