In today’s big data world, where approximately 2.5 quintillion bytes of data are created each day, it’s no wonder that companies are challenged by data governance. We think of data governance as how a company manages specific aspects of data such as availability, usability, integrity, and security. Data security governance oversees security through defined data protection and privacy policies.
Done well, data security governance can produce a framework that makes it easier for an organization to centralize and standardize their approach to enabling security across the data governance program. A mature data security governance program will not only outline the minimum requirements of the organization’s security program, such as compliance requirements, but also help a company better understand the data it needs to protect.
Security teams can leverage metadata—or data that describes data—to better understand the information and enable an organization to perform analysis to support decision making. Metadata exists as data in the context of who, what, when, where, why, and how. This information helps security teams identify the content of the larger data, including what it might mean, where companies should store it, how they can use it, and, if applicable, how to protect the data according to the data security governance programs policies and procedures. It’s important to remember that companies need to protect metadata as well; information describing sensitive data sets could itself be sensitive, or inadvertently provide insight into gaining unauthorized access to sensitive data.
A successful data security governance program begins with a foundational framework that takes into consideration people, processes, and technologies. It should encourage communication and foster a security-aware, data-centric culture, enabling the business to use information properly to better achieve busi ..
Support the originator by clicking the read the rest link below.
