The need for a holistic and comprehensive Data Security Approach:
The possibility of a Data Security breach must be examined from within the organization and external to the organization with emphasis on all possible avenues for a breach.
Urmez Daver,Safescrypt
An effective data security solution must take into account the nature of business transactions and business processes an organization follows.
The possibility of a Data Security breach must be examined from within the organization and external to the organization with emphasis on all possible avenues for a breach.
Consider an organizational scenario where you have
100 mobile users accessing the corporate network using their laptops
A web based application which about 500 mobile users access from public internet access points over a VPN
200 users within an organizations facility using standard desktops
Email is the preferred mode of communication
Webbased application which users access and update backend databases
A simplistic but realistic environment, but lets start examining a few apparent points of failure for a Data Security
These are just a few points of failure that could lead to a data security breach and its important that they be identified and put onto your enterprise security roadmap. Over the next few months we will address how some of these issues could be dealt with and solutions available to address these Data Security concerns.
For more information on Data Security Solutions from Sify , please email esbmarketing@sifycorp.com
| Event |
Impact |
| Laptop of a mobile user is stolen |
Data residing on the laptop runs the risk of being compromised and can be used by a competitor for commercial advantage or a regulator for law enforcement. |
| Unauthorized Access to the web based application in the absence of strong authentication techniques. |
Unauthorized updates to information or information could be retrieved in an authorized manner. |
| Data leakage : Information files not contained and copied by an employee onto plug and play media like MP3 players, memory sticks |
Confidentiality of data could be breached is this information is exposed to unauthorized access outside the organization |
| compromise of Email messages : Interception, unauthorized changes, loss of confidentiality |
If email is at the heart of a business transaction infrastructure any compromise could be detrimental. |
|
