Connect with us

Top Stories

DATA LOSS PREVENTION: OUTSMARTING THE BAD GUYS

Published

on

DATA LOSS PREVENTION: OUTSMARTING THE BAD GUYS

 

 Mark Weir, Regional Director UK & Ireland at Fortinet

Preventing the loss of critical or sensitive data has been an issue for as long as there has been proprietary information and intellectual property. But recent developments both in regulatory requirements and in the evolution of network infrastructures, including BYOD, virtualization, sophisticated applications, shadow IT, and cloud environments, make it imperative that organizations take a new look at how they control and protect critical data. Most of the time, data loss is unintentional, attributed to employees that unknowingly violate security policy or attempt to get around email based security solutions by using a personal Web-based e-mail, IM, or online file sharing application to transmit sensitive documents.

Regardless of the method or intent, the consequences of lost or stolen data can be disastrous for an organization. Valuable information, such as intellectual property, blueprints, or trade secrets acquired by a competitor or sold on the black market can potentially cost an organization millions in losses. Classified government information that falls into the wrong hands can compromise a nation’s safety and security. Exposure of customer data can leave an organization susceptible to law suits, customer attrition, and damage to brand and reputation. And data leakage is often a red flag that signals other compliance violations that can cost an organization hefty fines or loss of credit card processing rights.

That’s where Data Loss Prevention (DLP) solutions come into play. DLP is more than a product, or even set of products. It is a systems-based solution that needs to be applied across the entire distributed network, including endpoints, local and distributed networks, data centers, cloud services, applications, and web and e-mail services in order to prevent end users from sending sensitive or valuable information to unauthorized users and devices. An effective DLP strategy can also be a valuable tool for IT administrators, enabling them to create, refine and enforce policy, gain broad visibility into data flow, filter data streams on the network, and protect data at rest, in motion, or in use.

IT Transformation and DLP

Network infrastructures are entering a period of dramatic transformation. Customers, employees, contractors, and business partners have an unprecedented need to access critical business data and network resources. The number and kinds of devices used to access this data are expanding rapidly, from smartphones, tablets to personal laptops that are increasingly not controlled by IT. At the same time, critical data is being stored offsite on a variety of third-party platforms, something known in the industry as Shadow IT.

In this evolving environment, the traditional perimeter of the data center, and the network itself, is fundamentally changing. Users expect to be able to access any information, from any location, at any time, using any device. The result is that the corporate network is expanding beyond its traditional borders to include web and cloud-based access.

Securing data in this environment can be a complex process because that data no longer simply exists behind the iron doors of the data center. The flow of data transactions into and out of the data center, between data centers, or that is used and stored on a wide variety of devices is increasing at a dramatic pace. During this process, the nature of the data changes, and comprehensive data loss security strategies need to address these different states.

Add to this complexity the dramatic rise in regulatory requirements. Increasing numbers of regulations have been imposed by government or industry, or even self-imposed as best practice standards or legal defense hedges. Most regulatory compliance mandates are focused around the need to protect data – from personal information related to customers, patients or clients, to protecting sensitive or secret information from falling into the wrong hands. This means that existing data security practices and policies need to be reviewed and updated on a regular basis, especially as the environment within which this data exists continues to undergo significant transformation.

The common security thread across all of these changes is the need to protect and preserve critical, sensitive, or confidential data in the midst of a rapidly expanding environment where traditional security solutions are less and less relevant.

CyberCriminals are Getting More Organized. Your Data Loss Protection Strategy Needs to Outpace Them

The profile of high-tech criminals has changed from one of vandals and mischief-makers to organized criminals who exploit weaknesses in your security strategy to steal data for profit. Securing data against these criminals, both outside of and inside your organization, requires implementing a security strategy across the entire breadth of the environments within which your data may exist.

It is important to remember that data loss prevention is achieved through the coordination of many different components. The first, and most essential, is a strong policy and governance strategy. Utilizing the resources of an expert is essential in creating a comprehensive strategy that not only secures your data, but which can also withstand scrutiny from compliance regulators.

After a policy is in place, it is essential to design a network that is able to discover, analyze, and secure data. This can be achieved through a combination of specific data management and control tools, content-aware security devices and solutions, and the ability to leverage the devices, intelligence, and services that already exist in your network. As with policy creation, utilizing the services of data loss prevention IT experts can help you design and implement a secure architecture that meets both your data policy and governance requirements as well as any external regulatory mandates.

Many security solutions are inadequate in addressing data loss prevention requirements.

  • No central policy, command, management, orchestration, or control
  • Poor visibility into the larger security solution
  • Inability to collect and share critical event information between solutions
  • Little to no collaboration between discrete security elements
  • No real integration between various security devices and the network
  • High IT overhead for managing and maintaining siloed security elements

An effective data loss prevention strategy needs to address such areas as data management solutions, perimeter control, network segmentation and security zones, access control, identity of both users and devices, connectivity and VPN, data encryption, mobile devices, cloud services, content control such as web and email, application management and content inspection, and secure storage.

As networks, devices, and data itself continues to change, it is important to understand what your existing data loss prevention strategy can and can’t do. Many attacks seek to compromise new technologies that have often been adopted and implemented without a data loss strategy being implemented. Others, like advanced persistent threats, are designed to operate below the radar of most security solutions, often carving data up into unrecognizable chunks to be reassembled later.

An effective data loss prevention strategy, therefore, needs to participate in an active lifecycle security strategy, which includes 1) preparation and planning as new network technologies, strategies and devices are being considered, 2) designing and implementing collaborative and adaptive security as an integral part of your network architecture, 3) continuous assessment and automated response to threats as they occur, and 4) the implementation of forensic tools that allow you to immediately trace an event to its source, identify bad actors or compromised devices inside your network, and optimize your environment to prevent future breaches.

Top Stories

Spain’s jobless hit four million for first time in five years as pandemic curbs bite

Published

on

Spain's jobless hit four million for first time in five years as pandemic curbs bite 1

By Nathan Allen and Belén Carreño

MADRID (Reuters) – The number of jobless people in Spain rose above 4 million for the first time in five years in February, official data showed on Tuesday, as COVID-19 restrictions ravage the ailing economy.

Since the onset of the pandemic, Spain has lost more than 400,000 jobs, around two-thirds of them in the hospitality sector, which has struggled with limits on opening hours and capacity as well as an 80% slump in international tourism.

Jobless claims rose by 1.12% from a month earlier, or by 44,436 people to 4,008,789, Labour Ministry data showed, the fifth consecutive monthly increase in unemployment.

That number was 23.5% higher than in February 2020, the last month before the pandemic took hold in Spain.

“The rise in unemployment, caused by the third wave, is bad news, reflecting the structural flaws of the labour market that are accentuated by the pandemic,” Labour Minister Yolanda Diaz tweeted.

Restrictions vary sharply from region to region in Spain, with some shutting down all hospitality businesses, though Madrid has taken a particularly relaxed approach and kept bars and restaurants open.

A total of 30,211 positions were lost over the month, seasonally adjusted data from the Social Security Ministry showed. It was the first month more positions were closed than created since Spain emerged from its strict first-wave lockdown in May.

Still, the number of people supported by Spain’s ERTE furlough scheme across Spain fell by nearly 29,000 to 899,383 in February.

“These figures have remained more or less stable since September, indicating that the second and third waves of the pandemic have had a much smaller effect than the first in this regard,” the ministry said in a statement.

Hotels, bars and restaurants and air travel are the sectors with the highest proportion of furloughed workers, it added.

Tourism dependent regions like the Canary and Balearic Islands have been particularly hard hit, with the workforce contracting by more than 6% since last February in both archipelagos.

The last time the number of jobless in Spain hit 4 million was in April 2016.

(Reporting by Anita Kobylinska, Nathan Allen and Belén Carreño, Editing by Inti Landauro, Kirsten Donovan and Philippa Fletcher)

Continue Reading

Top Stories

Pandemic ‘shecession’ reverses women’s workplace gains

Published

on

Pandemic 'shecession' reverses women's workplace gains 2

By Anuradha Nagaraj

(Thomson Reuters Foundation) – The coronavirus pandemic reversed women’s workplace gains in many of the world’s wealthiest countries as the burden of childcare rose and female-dominated sectors shed jobs, according to research released on Tuesday.

Women were more likely than men to lose their jobs in 17 of the 24 rich countries where unemployment rose last year, according to the latest annual PricewaterhouseCoopers (PwC) Women in Work Index.

Jobs in female-dominated sectors like marketing and communications were more likely to be lost than roles in finance, which are more likely to be held by men, said the report, calling the slowdown a “shecession”.

Meanwhile, women were spending on average 7.7 more hours a week than men on unpaid childcare, a “second shift” that is nearly the equivalent of a full-time job and risks forcing some out of paid work altogether, it found.

“Although jobs will return when economies bounce back, they will not necessarily be the same jobs,” said Larice Stielow, senior economist at PwC.

“If we don’t have policies in place to directly address the unequal burden of care, and to enable more women to enter jobs in growing sectors of the economy, women will return to fewer hours, lower-skilled, and lower paid jobs.”

The report, which looked at 33 countries in the Organisation for Economic Co-operation and Development (OECD) club of rich nations, said progress towards gender equality at work would not begin to recover until 2022.

Even then, the pace of progress would need to double if rich countries were to make up the losses by 2030, it said, calling on governments and businesses to improve access to growth sectors such as artificial intelligence and renewable energy.

Laura Hinton, chief people officer at PwC, said it was “paramount that gender pay gap reporting is prioritised, with targeted action plans put in place as businesses focus on building back better and fairer”.

Britain has required employers with more than 250 staff to submit gender pay gap figures every year since 2017 in a bid to reduce pay disparities, but last year it suspended the requirement due to the coronavirus pandemic.

(Reporting by Anuradha Nagaraj @AnuraNagaraj; Editing by Claire Cozens. Please credit the Thomson Reuters Foundation, the charitable arm of Thomson Reuters, that covers the lives of people around the world who struggle to live freely or fairly. Visit http://news.trust.org)

Continue Reading

Top Stories

German January exports to UK fell 30% year-on-year as Brexit hit – Stats Office

Published

on

German January exports to UK fell 30% year-on-year as Brexit hit - Stats Office 3

BERLIN (Reuters) – German exports to the United Kingdom fell by 30% year-on-year in January “due to Brexit effects”, preliminary trade figures released by the Federal Statistics Office on Tuesday showed.

In 2020, German exports to the UK fell by 15.5% compared to 2019, recording the biggest year-on-year decline since the financial and economic crisis in 2009, when they fell by 17.0%, the Office said.

“Since 2016 – the year of the Brexit referendum – German exports to the UK have steadily declined,” the Office said in a statement.

In 2015 German exports to the UK amounted to 89.0 billion euros. In 2020, German they totalled 66.9 billion euros.

Imports to Germany from the UK totalled 34.7 billion euros in 2020, down 9.6 % compared to 2019.

(Reporting by Paul Carrel; Editing by Madeline Chambers)

Continue Reading
Editorial & Advertiser disclosureOur website provides you with information, news, press releases, Opinion and advertorials on various financial products and services. This is not to be considered as financial advice and should be considered only for information purposes. We cannot guarantee the accuracy or applicability of any information provided with respect to your individual or personal circumstances. Please seek Professional advice from a qualified professional before making any financial decisions. We link to various third party websites, affiliate sales networks, and may link to our advertising partners websites. Though we are tied up with various advertising and affiliate networks, this does not affect our analysis or opinion. When you view or click on certain links available on our articles, our partners may compensate us for displaying the content to you, or make a purchase or fill a form. This will not incur any additional charges to you. To make things simpler for you to identity or distinguish sponsored articles or links, you may consider all articles or links hosted on our site as a partner endorsed link.

Call For Entries

Global Banking and Finance Review Awards Nominations 2021
2021 Awards now open. Click Here to Nominate

Latest Articles

Newsletters with Secrets & Analysis. Subscribe Now