Cybersecurity and the importance of securing your systems are topics we discuss often. Despite this, the actual data residing in your company’s IT systems is rarely talked about.<\/p>\n
Cybersecurity breaches today most often involve encrypted corporate data.<\/p>\n
Increasing numbers of breaches are causing governments to tighten up their data protection legislation.<\/p>\n
As a result of GDPR, this has already happened in Europe.<\/p>\n
Although you might not operate in Europe, if you have clients in Europe, you are also subject to European law. Due to all the new rules in place, you must know where your company’s data is located, how it is secured, and if it is backed up.<\/p>\n
We’ve listed the most common locations for company data to be stored here:<\/p>\n
A decade ago, cloud was a relatively new concept in the IT world, but now it has become so prevalent – with most email services being cloud-based, this is the most common place for company data to be stored.\u00a0 Are you aware of what lurks in your inbox or, more importantly, in the HR department?\u00a0 If you keep a lot of CVs and data on individuals on file, you could get fined severely.<\/p>\n
This is the most obvious place where data is stored.\u00a0 It is important to have encryption on all devices, so that if anything goes missing, there is a limited chance of accessing the data.<\/p>\n
3) USBs, portable storage and memory cards<\/p>\n
There have been numerous breaches caused by the loss or misuse of USB drives in government agencies.\u00a0 Restricting the use is the best advice we can give you. Or an outright ban on USB storage devices within your company.\u00a0 It’s very convenient for transferring files, but it’s also very easy to lose them.<\/p>\n
There is a good chance that you also have on-premise servers performing some basic functions even if you use cloud services.\u00a0 Network file shares, printer servers, and directory services are the most common.<\/p>\n
Although you may have great software and systems protecting these servers, we ask about physical access.\u00a0 Is it easy for someone to access these servers physically in your office?<\/p>\n
Do they live in a server room or in a spare cupboard in the office?\u00a0 Is there a procedure for accessing these locations and who is responsible for it?<\/p>\n
It’s fairly common for larger sized businesses to have a constant flow of suppliers, contractors, and consultants.\u00a0 As a result of these interactions, data is usually transferred.\u00a0 What is the company’s policy on providing data to third parties?\u00a0 Is there an NDA in place?\u00a0 Does IT review a questionnaire to determine what security measures are in place with these third parties?<\/p>\n
If the correct security was not in place, would a breach invalidate your insurance policy?<\/p>\n
Those are all valid questions, and we don’t want to scaremonger, but with the number of breaches now happening regularly, these types of questions are becoming more common.<\/p>\n