{"id":6145,"date":"2023-10-13T15:10:09","date_gmt":"2023-10-13T19:10:09","guid":{"rendered":"https:\/\/solutionsreview.com\/data-management\/?p=6145"},"modified":"2023-10-17T09:56:25","modified_gmt":"2023-10-17T13:56:25","slug":"going-beyond-traditional-perimeter-security","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/data-management\/going-beyond-traditional-perimeter-security\/","title":{"rendered":"Going Beyond Traditional Perimeter Security"},"content":{"rendered":"

\"\"<\/p>\n

Solutions Review\u2019s <\/strong><\/i>Contributed Content Series<\/u><\/strong><\/i><\/a> is a collection of contributed articles written by thought leaders in enterprise technology. In this feature, Privacera<\/a> CEO Balaji Ganesan offers commentary on going beyond traditional perimeter security.<\/strong><\/i><\/span><\/p>\n

It\u2019s a fact that these days, enterprise organizations are more concerned with protecting their data than ever before – and rightly so. Every data breach, such as the recent Forever 21 breach<\/a> that saw 500,000 individuals’ private data hacked, or the Tesla breach<\/a> that leaked more than 75,000 individuals\u2019 personal information, reverberates throughout the business world as a stark reminder to shore up security measures to protect privacy, prevent reputational damage, and avoid regulatory penalties.<\/p>\n

The recent MGM cyberattack<\/a>, including the iconic Caesars, also illuminates the importance of robust data protection, as it potentially exposed tens of millions of individuals\u2019 personal information as a result of an attack that was perpetrated by a hacking group. It reinforces the need for fine-grained data access controls and entitlements; perimeter- based safeguards are not sufficient anymore.<\/p>\n

\t\t\t
\"Download<\/a><\/div>\n\t\t<\/div><\/div>\n

Perimeter Security Governance<\/strong><\/h2>\n

Perils of Neglecting Security<\/strong><\/h3>\n

According to a report<\/a> published by the Identity Theft Resource Center (ITRC), 1,802 data compromises occurred in 2022, which was only 60 shy of the all-time high that was set in 2021.Global security spending is projected to reach $219 billion this year and is expected to grow to nearly $300 billion by 2026, according to the International Data Corporation\u2019s (IDC) forecast<\/a>. Investments in cybersecurity software, hardware, and services are anticipated to increase by 12 percent compared to 2022, surpassing the growth rate of overall IT spending.<\/p>\n

According to the IDC forecast, the largest security spenders in 2023 will be organizations in banking, manufacturing, professional services, and federal governments, collectively accounting for over one-third of total security spending. Even with this level of investment, it’s apparent that there is still plenty of room for improvements. This starts with an added layer of security to establish more fine-grained access controls to mitigate potential breaches of the perimeter. Unfortunately when sensitive data is compromised, it underscores the critical importance of robust IT security and data protection policies, and highlights the need to fortify security posture.<\/p>\n

Impact of this Incident <\/strong><\/h3>\n

Recent events underscore the vital need for organizations to proactively address security vulnerabilities. In the MGM cyberattack on September 7th, a group of hackers who call themselves, “Scattered Spider” breached MGM’s data security framework, which MGM attempted to remedy with a shutdown of their computer systems. The hackers potentially accessed tens of millions of individuals’ sensitive personal data and asked for a ransom of $30 million. MGM allegedly paid half of the ransom, but experts suggest that the shutdown of their computer systems may cost MGM upwards of $8 million per day. On top, MGM customers had a degraded experience with long waiting lines and numerous other inconveniences as a result of the attack.<\/p>\n

The MGM attack was orchestrated through social engineering and ultimately they managed to obtain credentials. This incident highlights the imperative for organizations, like MGM Resorts, to enhance their security protocols to secure access to sensitive data effectively. Even in cases with credentials being compromised, the impact of these security incidents can be mitigated by avoiding all users to see and access all of the data. With different roles and data access controls in place, organizations can implement the least privilege model giving any user’s account only those privileges which are vital to perform its intended functions.<\/p>\n

How to Avoid a Similar Incident <\/strong><\/h3>\n

Data security is necessary to strike the right balance between transforming each organization to be data driven while ensuring the right safeguards and proper data policies in place. Active enforcement of these data policies and controls is paramount to ensure continuous protection of an organization\u2019s data.<\/p>\n

Below are key considerations to build toward a unified, enterprise-grade, proven data security framework with comprehensive security, and audit capabilities:<\/p>\n