Recent research from Computerworld reveals that 70 per cent of healthcare organisations don’t have an accurate inventory of where personally-identifiable information is stored. And no vertical has more privacy information than healthcare, so it’s reasonable to look to healthcare to be leaders in this area.
Yet, cyber privacy policies are a hot item in other industries as well. It’s down to Chief Security Officers (CSOs) to come up with a solution; to stop the constant game of catch-up and adding cyber security controls only after a problem has highlighted the lack of cyber security protocols.
Gartner recognises the dire seriousness of the privacy and security situation, recognising the constant stream of new threats to data and privacy, as well as the fact that the budgets to deal with protecting information are, and will remain, under pressure. They believe at least half of all organisations will be forced to revise their current cyber privacy policies before the end of 2012.
Conversations with CSOs are leaning towards two main areas:
- The best way for an organisation to get up to speed fast on cyber security issues.
- And the most effective mindset for a successful CSO.
Getting up to speed is about asking the people who know — the experts — who’ve done the analysis and are not just grasping trends, but identifying them in the first place.
The most effective mindset is about taking a holistic view of what could possibly affect your organisation’s cyber security. Below you read some tips.
A few starting points for a holistic cyber security view
- Investigate the many ways your people, the ones on your side, are a bigger threat to your security than malign forces on the outside.
- Think about how you contain the ‘security sprawl’ that comes with mixing work and home devices in work and home situations, without limiting effectiveness and ability to innovate.
- Work out how you can assess the risks that come with the cloud and social networks so you can educate internally about making the most of these media in a secure way.