Cybersecurity

Data protection must be at the heart of business change, conference hears

Pro
Image: Stockfresh

21 September 2016

Data protection measures must be at the heart of every digital transformation project, said analysts at the IDC Enterprise Security Conference in Croke Park on 15 September.

In his talk Accelerating digital transformation through next generation security, IDC research director for European security Duncan Brown said the embracing of ‘third platform’ technologies like cloud, mobile, social and analytics were a concern at CEO level but that an overzealous approach to security can be an inhibitor to innovation.

Brown argued that a dynamic, automated approach to security would become an emerging trend in response to the changing nature of the threat landscape.

This point was echoed by IBM chief product officer Denis Kennelly. Kennelly noted that cybersecurity was not about dealing with lone actors but organised criminals working in networks. The nature of data being traded through the TOR network is also changing – with medical records joining e-mail passwords and credit card numbers as a popular target.

Kennelly argued for a collaborative approach to security at the ecosystem level but also at industry level, saying the current market of more than 1,200 providers was making it difficult for businesses to select a solution. He added that IBM’s Watson was bringing cognitive computing solutions to bear on security problems, providing a more agile solution to the traditional approach of building firewalls.

The General Data Protection Regulation Policy (GDPR) also featured highly, with NetApp chief privacy officer Sheila Fitzpatrick saying that companies should not treat privacy and security as the same thing and that where security is often labelled “the department of no” this more accurately applies to privacy. Fitzgerald said the end of Safe Harbour advent of GDPR meant that companies would have to justify what data they were asking users for, how long they could retain it and for what purpose. Fitzgerald noted the importance of locating data in countries with strict data protection guidelines as a means not only to comply with GDPR but also futureproof against any further developments.

Fitzgerald contrasted the approach of the US to data protection where few laws exist with Germany, where strong protections are in place. She said that NetApp’s approach extends beyond softcopies to hardcopies and that to date the company had achieved 95% GDPR compliance.

The event was rounded off by a discussion on the roots of GDPR by VigiTrust CEO Mathieu Gorge.

TechCentral Reporters

Read More:


Back to Top ↑

TechCentral.ie