Shulou(Shulou.com)06/01 Report--

Some time ago, the database of a certain station was removed, and a large amount of user data was sold in secret stations. Data security and data governance were once again raised to a high level, which has also become a headache for security practitioners. Operators, enterprises and individuals should be responsible for the management of data to users and social groups. Non-business-related data is firmly not collected, and business-related data also need to be safely stored.

The following bloggers will discuss with you the issues related to data security and data collation in enterprises.

First, explain the concept of "unified security content center" put forward by a security manufacturer:

1. SWG WEB Security Gateway

The most effective protection against advanced threats and data theft

2. SEG email Security Gateway

State-of-the-art email protection against hybrid and directed email protection

3. Prevent DLP data from leaking

Deep content analysis is used to identify, monitor and protect static, transmissive and in-use data, with user and destination-aware features.

4. Cloud connects to the security cloud

Provides the best protection for web and mail from anywhere, with the lowest total cost of ownership and the easiest deployment

5. Mobile Mobile Security

Unique and effective protection against theft, loss and malicious app of mobile data

The above dimensions establish a unified security content data center to protect internal data security and data processing in different dimensions.

For enterprise information security, if we want to get structural guarantee, we need to have a systematic information security support system. Regardless of the reference framework used in this system, four key elements need to be considered, namely, the human People process Process, the technical Technology, and the data Data (PPTD), where:

Personnel are the resources for process execution

Process is the systematic ability of the organization.

Technology is the support of process effectiveness

Data is the driver of process execution.

Technical security measures are not only one of the three types of security measures to meet the needs of enterprise information security, but also the most important and complex, so it is necessary to ensure the coordination between technology control and other security control through the design of architecture.

The core of risk is the assets generated around business support or business, and depends on the assets.

Its own vulnerability and the security measures that have been taken, so the security technology effectiveness assessment strategy includes:

Effectiveness evaluation for business / business assets effectiveness evaluation for threat parties

Vulnerability-oriented effectiveness assessment

Effectiveness evaluation of comprehensive weighting

Data anti-disclosure: based on centralized strategy, using deep content analysis to identify, monitor and protect static data, data in transmission and data in use.

The lifecycle covered by data protection:

Data anti-disclosure bloggers believe that it is necessary to govern from the following three dimensions: organization, system and technology.

So those technical brute force people who think that technology can solve all problems, which is the reason why bloggers put technology at the end.

Organizational security:

Sort out and define the responsibilities of management, business department, implementation department, compliance monitoring and audit department from top to bottom

Promote the implementation of data leak prevention management and control from the organization.

System guarantee:

Establish or improve data anti-leakage overall strategy, data anti-leakage management method, data anti-leakage detail strategy (data-oriented)

And the specific operation flow; from the system to support data leakage prevention work.

Technical support:

Adopt mature and professional database anti-leakage technology platform, implement the detailed strategy approved by management, realize the recording, alarm and blocking of data leakage behavior through the platform, and technically achieve the goal of data leakage prevention.

Only the effective combination of the three can form an effective system and protect the core important data of the company continuously.

The overall mechanism of data protection:

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.