March 19, 2015 By Luis Casco-Arias 2 min read

My two-year-old daughter already knows how to use my phone to play with apps. I did not teach her how to do this, so as I watch in awe, I cannot help but think about how the improvement of security products will now address the transitions we expect in the future.

Until recently, security products were geared toward a unique type of person who was technical, a little paranoid and highly skilled. These products were catered to making everyday tasks easier, more secure and less costly. Data security solutions have provided IT and security administrators with a plethora of controls to protect data privacy, fend off threats to sensitive information and help swiftly pass compliance audits. As these solutions deploy to ever-larger environments and scopes, they do not usually have to incur exploding operational costs.

However, in recent years, I have continued to hear about a few issues on the operations side, including a shortage of skills, stricter or lower IT budgets, increased pressure and scrutiny around compliance and data privacy and increased demand to manage more resources and data.

While these matters have always driven innovation around automation and visibility, they are now also demanding simplification based on the need to do more with less technical skills and the need to assign accountability for data security across the enterprise and at business leadership levels.

It is common for IT operations or IT security to handle the demands of managing data security across the entire enterprise. However, it is more likely now that they no longer own the decision-making process. At the same time, as data privacy and confidentiality become the focus of security, there is a call for better data stewardship at higher business levels, giving rise to new positions such as chief risk officer and chief data officer.

The logical conclusion is that to leverage the value of our data security solutions, we must address usability at the business analyst level. This means creating interfaces and processes that walk the analyst through the decision-making process in their language and at their pace and then translating actionable items for the operational enforcers. This will require better visualization, modeling, impact and predictive analysis, drill-downs, in-context controls, automatic workflows and reporting that covers the entire data security strategy. If we make the governance experience fluid and contextual for business leaders, they will be willing and able to make good decisions.

More from Data Protection

Defense in depth: Layering your security coverage

2 min read - The more valuable a possession, the more steps you take to protect it. A home, for example, is protected by the lock systems on doors and windows, but the valuable or sensitive items that a criminal might steal are stored with even more security — in a locked filing cabinet or a safe. This provides layers of protection for the things you really don’t want a thief to get their hands on. You tailor each item’s protection accordingly, depending on…

What is data security posture management?

3 min read - Do you know where all your organization’s data resides across your hybrid cloud environment? Is it appropriately protected? How sure are you? 30%? 50%? It may not be enough. The Cost of a Data Breach Report 2023 revealed that 82% of breaches involved data in the cloud, and 39% of breached data was stored across multiple types of environments. If you have any doubt, your enterprise should consider acquiring a data security posture management (DSPM) solution. With the global average…

Cost of a data breach: The evolving role of law enforcement

4 min read - If someone broke into your company’s office to steal your valuable assets, your first step would be to contact law enforcement. But would your reaction be the same if someone broke into your company’s network and accessed your most valuable assets through a data breach? A decade ago, when smartphones were still relatively new and most people were still coming to understand the value of data both corporate-wide and personally, there was little incentive to report cyber crime. It was…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today