{"id":7906,"date":"2022-01-29T18:40:16","date_gmt":"2022-01-29T18:40:16","guid":{"rendered":"https:\/\/outofsite.biz\/cynance\/?p=7906"},"modified":"2022-01-29T18:40:17","modified_gmt":"2022-01-29T18:40:17","slug":"this-data-protection-day-protect-data-from-attack","status":"publish","type":"post","link":"https:\/\/outofsite.biz\/cynance\/this-data-protection-day-protect-data-from-attack\/","title":{"rendered":"Every day is Data Protection Day. How can you protect your data from attack?"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"7906\" class=\"elementor elementor-7906\">\n\t\t\t\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-45e0897e elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"45e0897e\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-2a13f229\" data-id=\"2a13f229\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-264884f6 elementor-widget elementor-widget-text-editor\" data-id=\"264884f6\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.11.5 - 14-03-2023 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#818a91;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#818a91;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<p><span style=\"font-weight: 400;\">Data protection is one of the central pillars of cybersecurity, everything we do in the profession is to protect data before it is attacked. So for us, every day is <\/span><a href=\"https:\/\/www.coe.int\/en\/web\/portal\/28-january-data-protection-day\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Data Protection Day<\/span><\/a><span style=\"font-weight: 400;\">.<\/span><\/p><p><span style=\"font-weight: 400;\">For many organisations, data protection feels like a daunting task. It requires investment of both time and resources, and it never ends. However, the risks of failing to protect the data an organisation holds can be catastrophic. Research by the US Securities and Exchange Commission in 2015 found that <\/span><a href=\"https:\/\/www.sec.gov\/news\/statement\/cybersecurity-challenges-for-small-midsize-businesses.html\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">60% of small and medium businesses<\/span><\/a><span style=\"font-weight: 400;\"> (SMBs) who suffer a cyber attack do not recover and shut down within six months.<\/span><\/p><p><span style=\"font-weight: 400;\">So, this Data Protection Day we look at some practical steps every organisation can take to secure the data they hold.<\/span><\/p><h2><span style=\"font-weight: 400;\">What is Data Privacy Day and Week?<\/span><\/h2><p><a href=\"https:\/\/www.coe.int\/en\/web\/data-protection\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Data Privacy Week<\/span><\/a><span style=\"font-weight: 400;\"> and its final day, Data Protection Day were established by the Council of Europe in 2006. The original purpose of Data Protection Day was to raise awareness among individuals about data privacy as a whole, including how organisations use their data, the responsibilities of organisations towards individuals\u2019 data, and how they can protect their own data.<\/span><\/p><h2><span style=\"font-weight: 400;\">Why is data protection important?<\/span><\/h2><p><span style=\"font-weight: 400;\">Data is integral to many businesses. They collect data about their clients and customers to use in everything from service delivery to marketing and business growth. Data helps businesses optimise their activity, and make a profit.<\/span><\/p><p><span style=\"font-weight: 400;\">However, organisations also have a responsibility to both their customers and to protect that data. Thanks to initiatives such as Data Protection Day, and regulations such as the European <\/span><a href=\"https:\/\/gdpr.eu\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">GDPR<\/span><\/a><span style=\"font-weight: 400;\"> and the Californian <\/span><a href=\"https:\/\/oag.ca.gov\/privacy\/ccpa\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">CCPA<\/span><\/a><span style=\"font-weight: 400;\">, customers know their rights, and will demand that organisations protect their data privacy in return for providing it to them.<\/span><\/p><p><span style=\"font-weight: 400;\">Many regulatory frameworks are able to fine organisations who fail to suitably protect data privacy. For the GDPR, these fines can be up to \u20ac20 million, or 4% of annual worldwide turnover, depending on the severity of the offence.<\/span><\/p><p><span style=\"font-weight: 400;\">As a result, it is important for organisations to implement an effective <\/span><a href=\"https:\/\/outofsite.biz\/cynance\/security-risk-and-compliance\/privacy-data-protection-gdpr\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">data protection programme<\/span><\/a><span style=\"font-weight: 400;\"> to avoid the damage to their reputation and finances that a data breach will cause.<\/span><\/p><h2><span style=\"font-weight: 400;\">What is data protection and data privacy?<\/span><\/h2><p><span style=\"font-weight: 400;\">Data protection and data privacy are often used interchangeably, and they are two sides of the same strategy. <\/span><b>Data privacy<\/b><span style=\"font-weight: 400;\"> defines who is authorised to access the data; <\/span><b>Data protection<\/b><span style=\"font-weight: 400;\"> provides the tools and policies to restrict access to that data. Both work together to ensure that customer data is secure within the organisation.<\/span><\/p><h2><span style=\"font-weight: 400;\">When should data be protected?<\/span><\/h2><p><span style=\"font-weight: 400;\">The purpose of data protection is to protect the confidentiality, integrity, and availability of data.<\/span><\/p><p><b>Confidentiality<\/b><span style=\"font-weight: 400;\"> is the ability to keep something secret. Organisations must implement protections to ensure that data remains secret from the wider world, by ensuring that only authorised people can access it.<\/span><\/p><p><b>Integrity<\/b><span style=\"font-weight: 400;\"> is the knowledge that the data is accurate and correct. Organisations must implement protections to ensure that data can\u2019t be changed or tampered with.<\/span><\/p><p><b>Availability<\/b><span style=\"font-weight: 400;\"> is ensuring that data and the systems that hold it are available to authorised users at all times (or as close to it as possible). This includes protecting data from an attack that takes it offline, disrupting business.<\/span><\/p><p><span style=\"font-weight: 400;\">In order to ensure the confidentiality, integrity, and availability of the data, it must be protected:<\/span><\/p><ul><li><b>In transit <\/b><span style=\"font-weight: 400;\">&#8211; when it is sent from one location to another for example by email<\/span><\/li><li><b>At rest <\/b><span style=\"font-weight: 400;\">&#8211; when it is stored on computers and servers<\/span><\/li><li><b>In use<\/b><span style=\"font-weight: 400;\"> &#8211; when it is being processed through a specific application<\/span><\/li><li><b>At the end of life <\/b><span style=\"font-weight: 400;\">&#8211; when a computer or server needs to be replaced, or when a dataset is no longer needed<\/span><\/li><li style=\"list-style-type: none;\">\u00a0<\/li><\/ul><h2><span style=\"font-weight: 400;\">Take inspiration from Data Protection Day 2022: How to protect data<\/span><\/h2><p><span style=\"font-weight: 400;\">Protecting an organisation\u2019s data can be broken down into a set of practical steps to initiate a data loss prevention programme that combines strategies and tools to prevent data from being deliberately stolen or compromised, accidentally sent to the wrong recipient, or unintentionally deleted.<\/span><\/p><p><span style=\"font-weight: 400;\">&#8211; Know what data the organisation holds, and where it is stored. Protect that data from unauthorised access, and implement controls to avoid data being held outside of specific storage areas.<\/span><\/p><p><span style=\"font-weight: 400;\">&#8211; Monitor systems and use tools to detect personal data. Data is saved in many different places across a network including file servers, cloud services, employee laptops, portals, and more. Data is generated and saved all the time, so it is vital to stay on top of it.\u00a0<\/span><\/p><p><span style=\"font-weight: 400;\">&#8211; Don\u2019t collect data you don\u2019t need, and don\u2019t keep data longer than necessary. The more data collected, the higher the risk it poses to the organisation. When a data set is no longer needed, dispose of it safely.<\/span><\/p><p><span style=\"font-weight: 400;\">&#8211; Manage access to data. Who has access to what data, and do they really need it? Data should only be accessible to users who need it to do their daily jobs.<\/span><\/p><p><span style=\"font-weight: 400;\">&#8211; Keep accounts safe with strong passwords and MFA. Use a password manager to help users create strong, unique passwords for every account.<\/span><\/p><p><span style=\"font-weight: 400;\">&#8211; Support employees to work safely remotely. Provide training in how to work safely out of the office, and how to identify basic threats. In addition, implement remote working controls.<\/span><\/p><p><span style=\"font-weight: 400;\">&#8211; Encourage safe data practices such as clear screen and clear desk policies to avoid data lying around, safe transfer protocols, encryption for sensitive data, and password protected files and emails.<\/span><\/p><p><span style=\"font-weight: 400;\">&#8211; <\/span><a href=\"https:\/\/outofsite.biz\/cynance\/infrastructure-security\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">Configure firewalls<\/span><\/a><span style=\"font-weight: 400;\"> to prevent unauthorised transfer of data out of the organisation\u2019s network.<\/span><\/p><p><span style=\"font-weight: 400;\">&#8211; Encrypt data in transit and at rest. This protects data at all times and ensures that even if it is accessed or intercepted, it can\u2019t be used.<\/span><\/p><p><span style=\"font-weight: 400;\">&#8211; Back up data regularly to help the organisation recover in the event of a breach or accidental deletion. Backups should be stored securely in a different location to the main network, and should be retained for a set period of time before they are overwritten. Backups should also be tested to ensure that they are restorable.<\/span><\/p><p><span style=\"font-weight: 400;\">&#8211; Securely dispose of data. Ensuring that all data is removed from devices before they are disposed of securely.<\/span><\/p><p><span style=\"font-weight: 400;\">As we all know, prevention is better than cure. So use this year\u2019s Data Protection Day as your cue to start implementing an <\/span><a href=\"https:\/\/outofsite.biz\/cynance\/security-risk-and-compliance\/cybersecurity-risk-management\/\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">information security management programme<\/span><\/a><span style=\"font-weight: 400;\"> that protects the data you hold from harm.<\/span><\/p><p><span style=\"font-weight: 400;\">Stay safe<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Data protection is one of the central pillars of cybersecurity, everything we do in the profession is to protect data before it is attacked. So for us, every day is Data Protection Day. For many organisations, data protection feels like a daunting task. It requires investment of both time and resources, and it never ends.&hellip;<\/p>\n","protected":false},"author":10,"featured_media":7923,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18],"tags":[63,62],"_links":{"self":[{"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/posts\/7906"}],"collection":[{"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/comments?post=7906"}],"version-history":[{"count":0,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/posts\/7906\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/media\/7923"}],"wp:attachment":[{"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/media?parent=7906"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/categories?post=7906"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/tags?post=7906"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}