Changes in how – and where – data are stored, accessed and used are making security needs a moving target. Increasing use of cloud services are creating additional risks. Knowing where your data is stored is now more difficult. A well-intentioned employee who copies company data to a cloud storage service puts your data at risk. A security flaw in that cloud storage vendor's offering could affect more than just your vacation photos – now it could be your company's intellectual property that is taken.
Meanwhile, requirements for more mobile and real-time access to data and the advent of bring-your-own-device computing creates many more access points for mischief or error.
These new realities are placing sensitive company data at increasing risk. And that risk extends to the entire company, which faces:
Reducing that risk requires a solid security plan for both preventing and dealing with a potential breach. Developing that plan, in turn, requires an understanding of what needs to be protected; regulations and industry standards for data and privacy protection; how users access and share data, and current and possible security solutions.
It also requires constant attention and activity to: