Current challenges faced by the organizations

 

Data is exploding.



•        IDC forecasts that by 2025, the global datasphere will grow to 163 zettabytes (ZB). 1000 TB is 1 Petabyte, 1 Zettabyte is 1,000,000 Petabytes.

•        The type of data continue to evolve too. The organizations primarily used to deal with data such as emails and documents in the past. Now they are also dealing with instant messages, video files, images etc.

•        With the increase in data and the data types the number of regulations that an organization must comply with is also increasing like GDPR, HIPAA, CCPA etc. 


Current challenges for the organizations 



Data Management Challenges:

·       Organizations face difficulties in managing their data effectively.

·       Lack of information about risks poses a significant challenge.

Changing work patters:

·       People now work in diverse ways, including cross-boundary data creation and sharing.

·       Protecting data has become more complex due to these new work patters.

Expanded Protection Scope:

·       Beyond on-premises environments, data protection is necessary for:

o   Devices

o   SaaS applications

o   Cloud Services

         Risk Profile Impact:

·       Without an information protection and governance strategy, your risk profile may increase

Most common scenario  

·       Data exfiltration

Data exfiltration is an attack whereby an internal or external actor completes an unauthorized data transfer of sensitive corporate resources. The exfiltration of sensitive corporate resources is often accomplished due to a lack of appropriate authentication and authorization controls.

Common actors for data exfiltration are Malicious Insiders, Former Employees, Careless Insiders, Privileged users etc.

Example of data exfiltration



Comments

Post a Comment

Popular posts from this blog

Purview - Microsoft Information Protection

Hello, fellow tech enthusiasts! I’m Salim Jamil Khan, and I’ve had the privilege of witnessing the remarkable evolution of Microsoft 365 over the past 16 years. As a seasoned technology professional, I’ve seen it transform from its early days as Business Productivity Online Suite to Office 365 and Microsoft 365, a comprehensive suite of productivity tools we know today.  Join me on this journey as we unravel the complexities and celebrate the innovations that shape our digital lives.  My passion lies in security and compliance. As we navigate the digital landscape, these topics are more critical than ever. In my upcoming blogs, I’ll delve into: Microsoft Purview: A comprehensive set of solutions that helps organizations govern, protect, and manage data across their entire data estate. It combines the former Azure Purview and Microsoft 365 compliance solutions into a unified platform. Here’s what it offers: Data Security: Solutions like Microsoft Purview Data Loss Prevention...
Read more

Exact Data Match

Image
   As we discussed in our previous blog  here , understanding the data landscape is crucial for enhancing data protection. One effective technique for achieving this is through ‘Exact Data Match’ (EDM). Detection of sensitive information types can be done using various methods.  Built-in sensitive information types  - Ready to use, quick to deploy, over 200+ Custom sensitive information types  - If the preconfigured sensitive information types don't meet your needs, you can create your own custom sensitive information types that you fully define using regular expressions, predefined functions, keyword dictionaries, keyword lists or you can copy one of the built-in ones and modify it.  Trainable classifiers -   Machine learning models analyse data to identify sensitive information, many pretrained classifiers that are ready to use or can be created manually as needed. Named entity recognition -  They're complex dictionary and pattern...
Read more