{"id":982,"date":"2022-09-13T18:36:54","date_gmt":"2022-09-13T18:36:54","guid":{"rendered":"https:\/\/solutionsreview.com\/data-storage\/?p=982"},"modified":"2022-09-16T14:32:48","modified_gmt":"2022-09-16T14:32:48","slug":"data-compliance-strategies","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/data-storage\/data-compliance-strategies\/","title":{"rendered":"Data Compliance Strategies: 10 Best Practices to Consider"},"content":{"rendered":"

\"Data<\/p>\n

This is part of Solutions Review\u2019s Premium Content Series, a collection of contributed columns written by industry experts in maturing software categories. In this submission, Pure Storage<\/a> CTO Andy Stone offers 10 key data compliance strategies and best practices to stay out of the hands of ransomware evildoers.<\/em><\/strong><\/p>\n

\"SREffectively securing and managing your data<\/a><\/strong><\/span> is critical for preventing cyber-attacks – but that\u2019s not the only benefit. There\u2019s another costly implication of data mismanagement: data compliance infractions and the resulting fines levied by data protection authorities.<\/p>\n

What is data compliance? Why has it become so complicated?<\/p>\n

Compliance is a broad discipline – but ultimately it seeks to govern how organizations store, access, and use customer data. The end goal is to protect individuals\u2019 personal information and ensure their data isn\u2019t exploited or mishandled. While this is all good, it\u2019s often nuanced, constantly evolving, and tricky for organizations to interpret.<\/p>\n

For example, compliance doesn\u2019t just regulate how data is used\u2014it regulates how it\u2019s stored and deleted. For example, if a ransomware attack occurs, it’s often common for the affected organization to address compliance fines. That\u2019s because keeping too much data for too long is one of the biggest compliance missteps companies can make. GDPR (General Data Protection Regulation) calls this an individual\u2019s \u201cright to be forgotten,\u201d and it essentially means a company can\u2019t hang on to their data when it\u2019s no longer needed for processing.<\/p>\n

Additionally, the pervasiveness of technology in today\u2019s modern world has created a complicated relationship with personal data. And as technology evolves, so does how data is used and how it must be protected. As digital transformation continues, compliance will play more of an integral role in everything.<\/p>\n

Here\u2019s a short list of some best practices to help your company achieve compliance and stay out of the hands of ransomware evildoers.<\/p>\n

\t\t\t

\"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n

Data Compliance Strategies<\/strong><\/h2>\n
\n

Create a Compliance Framework<\/strong><\/h3>\n

A security or incident response framework explains how to detect, respond to, and recover from incidents. In a similar way, a compliance framework offers a structure for addressing all compliance regulations that relate to an organization, like how to evaluate internal compliance and privacy controls. A framework also helps identify the data, such as personal or sensitive data, that requires more stringent security protocols.<\/p>\n

Define Policies Regarding What Data is Collected and Why<\/strong><\/h3>\n

This step is part of creating a framework. There are many reasons to document the what and the why of data collection. Regulators may require that such policies are spelled out; if the data comes from consumers, there may be even more stringent requirements for detailing collection policies (see #4 below).<\/p>\n

Create Privacy Policies<\/strong><\/h3>\n

Be very clear with your customers about what data is being collected, what you\u2019re using it for, and how it is being stored and for how long. Also, be clear with customers about how they can request access to their personal data or request to \u201cbe forgotten\u201d and have their data removed from your systems.<\/p>\n

Step Up the Commitment to Disclosures<\/strong><\/h3>\n

Share, post, and maintain publicly available privacy policies.<\/p>\n

Stay on Top of the Latest Government Regulations That Impact Compliance<\/strong><\/h3>\n

A \u201cprivacy by design\u201d operating model can help you keep up with and adjust to constantly changing regulations. It means that you\u2019re building privacy into the design and operation of IT systems, infrastructure, and business practices\u2014instead of trying to bolt it on after the fact.<\/p>\n

Solidify Data Retention and Removal Policies<\/strong><\/h3>\n

This step is critical. Retention schedules dictate how long data is stored on a system before being purged, and schedules can vary by industry. In fact, 451 Research\u2019s 2021 Voice of the Enterprise reveals that 31 percent of respondents aren\u2019t always following their data deletion and retention policies\u2014or haven\u2019t implemented retention policies at all. The mark of a compliant, mature, and secure business is one that develops solid data retention and removal policies that are continually reviewed.<\/p>\n

Choose a Data Encryption Protocol<\/strong><\/h3>\n

Establish what kind of data encryption to employ and where\u2014on-premises, in the cloud, etc. The decisions may vary depending on where data resides as data encryption can occur at one of many points \u2013 at the application, in flight, and at rest (i.e. on the storage system).<\/p>\n

Talk to the CISO About Network Controls<\/strong><\/h3>\n

Since compliance is closely related to security, bring your CISO into conversations about network appliance configuration, least privilege access control, event logging, and multifactor authentication.<\/p>\n

Anonymize Sensitive Data<\/strong><\/h3>\n

When required, data should be anonymized to remove personally identifiable information with masking, tokenization, hashing, or anonymization. A compliance officer can ensure your organization is following retention and deletion policies and not backing up sensitive data previously slated for deletion for compliance reasons.<\/p>\n

Document How You\u2019ll Notify Parties Affected By a Breach<\/strong><\/h3>\n

Under GDPR, such notifications are mandatory\u2014and you definitely want the notification process to go off without a hitch. Decide who\u2019s responsible for getting the word out, how you\u2019re resolving the issue, and what you\u2019re doing to prevent breaches from happening again.<\/p>\n

Final Thought<\/strong><\/h4>\n

Leveraging data comes with immense opportunity, but it also comes with responsibility. If your business is a believer in the \u201cdata is the new oil\u201d piece of wisdom, then you also need to embrace compliance\u2014because, without it, the data may not be yours for much longer.<\/p>\n

<\/div>\n
\t\t\t

\"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n","protected":false},"excerpt":{"rendered":"

This is part of Solutions Review\u2019s Premium Content Series, a collection of contributed columns written by industry experts in maturing software categories. In this submission, Pure Storage CTO Andy Stone offers 10 key data compliance strategies and best practices to stay out of the hands of ransomware evildoers. Effectively securing and managing your data is […]<\/p>\n","protected":false},"author":134,"featured_media":983,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[6],"tags":[402,18],"acf":[],"yoast_head":"\nData Compliance Strategies: 10 Best Practices to Consider<\/title>\n<meta name=\"description\" content=\"Pure Storage CTO Andy Stone offers key data compliance strategies and best practices to stay out of the hands of ransomware evildoers.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/data-storage\/data-compliance-strategies\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Data Compliance Strategies: 10 Best Practices to Consider\" \/>\n<meta property=\"og:description\" content=\"Pure Storage CTO Andy Stone offers key data compliance strategies and best practices to stay out of the hands of ransomware evildoers.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/data-storage\/data-compliance-strategies\/\" \/>\n<meta property=\"og:site_name\" content=\"Best Enterprise Data Storage Software, Solutions, Vendors and Platforms\" \/>\n<meta property=\"article:published_time\" content=\"2022-09-13T18:36:54+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-09-16T14:32:48+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/data-storage\/files\/2022\/09\/Data-Compliance-Strategies.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Andy Stone\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Andy Stone\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/data-storage\/data-compliance-strategies\/\",\"url\":\"https:\/\/solutionsreview.com\/data-storage\/data-compliance-strategies\/\",\"name\":\"Data Compliance Strategies: 10 Best Practices to Consider\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/data-storage\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/data-storage\/data-compliance-strategies\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/data-storage\/data-compliance-strategies\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/data-storage\/files\/2022\/09\/Data-Compliance-Strategies.jpg\",\"datePublished\":\"2022-09-13T18:36:54+00:00\",\"dateModified\":\"2022-09-16T14:32:48+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/data-storage\/#\/schema\/person\/915af6e19c43ce6b416c5860764da815\"},\"description\":\"Pure Storage CTO Andy Stone offers key data compliance strategies and best practices to stay out of the hands of ransomware evildoers.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/data-storage\/data-compliance-strategies\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/data-storage\/data-compliance-strategies\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/data-storage\/data-compliance-strategies\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/data-storage\/files\/2022\/09\/Data-Compliance-Strategies.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/data-storage\/files\/2022\/09\/Data-Compliance-Strategies.jpg\",\"width\":800,\"height\":400,\"caption\":\"Data Compliance Strategies\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/data-storage\/data-compliance-strategies\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/data-storage\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Data Compliance Strategies: 10 Best Practices to Consider\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/data-storage\/#website\",\"url\":\"https:\/\/solutionsreview.com\/data-storage\/\",\"name\":\"Best Enterprise Data Storage Software, Solutions, Vendors and Platforms\",\"description\":\"Data Storage Buyers Guide and Best Practices\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/data-storage\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/data-storage\/#\/schema\/person\/915af6e19c43ce6b416c5860764da815\",\"name\":\"Andy Stone\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/data-storage\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e0d8d7d92eb9b77f019f026b516d135b?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e0d8d7d92eb9b77f019f026b516d135b?s=96&d=mm&r=g\",\"caption\":\"Andy Stone\"},\"description\":\"Andy Stone is an accomplished IT executive with a passion for technology and creating innovative solutions that solve business problems and deliver results. As CTO-Americas at Pure Storage, Andy is focused on delivering next-gen data storage and protection technologies that help companies get better insights, improve time-to-market, and make breakthroughs.\",\"url\":\"https:\/\/solutionsreview.com\/data-storage\/author\/astone\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Data Compliance Strategies: 10 Best Practices to Consider","description":"Pure Storage CTO Andy Stone offers key data compliance strategies and best practices to stay out of the hands of ransomware evildoers.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/data-storage\/data-compliance-strategies\/","og_locale":"en_US","og_type":"article","og_title":"Data Compliance Strategies: 10 Best Practices to Consider","og_description":"Pure Storage CTO Andy Stone offers key data compliance strategies and best practices to stay out of the hands of ransomware evildoers.","og_url":"https:\/\/solutionsreview.com\/data-storage\/data-compliance-strategies\/","og_site_name":"Best Enterprise Data Storage Software, Solutions, Vendors and Platforms","article_published_time":"2022-09-13T18:36:54+00:00","article_modified_time":"2022-09-16T14:32:48+00:00","og_image":[{"width":800,"height":400,"url":"https:\/\/solutionsreview.com\/data-storage\/files\/2022\/09\/Data-Compliance-Strategies.jpg","type":"image\/jpeg"}],"author":"Andy Stone","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Andy Stone","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/data-storage\/data-compliance-strategies\/","url":"https:\/\/solutionsreview.com\/data-storage\/data-compliance-strategies\/","name":"Data Compliance Strategies: 10 Best Practices to Consider","isPartOf":{"@id":"https:\/\/solutionsreview.com\/data-storage\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/data-storage\/data-compliance-strategies\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/data-storage\/data-compliance-strategies\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/data-storage\/files\/2022\/09\/Data-Compliance-Strategies.jpg","datePublished":"2022-09-13T18:36:54+00:00","dateModified":"2022-09-16T14:32:48+00:00","author":{"@id":"https:\/\/solutionsreview.com\/data-storage\/#\/schema\/person\/915af6e19c43ce6b416c5860764da815"},"description":"Pure Storage CTO Andy Stone offers key data compliance strategies and best practices to stay out of the hands of ransomware evildoers.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/data-storage\/data-compliance-strategies\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/data-storage\/data-compliance-strategies\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/data-storage\/data-compliance-strategies\/#primaryimage","url":"https:\/\/solutionsreview.com\/data-storage\/files\/2022\/09\/Data-Compliance-Strategies.jpg","contentUrl":"https:\/\/solutionsreview.com\/data-storage\/files\/2022\/09\/Data-Compliance-Strategies.jpg","width":800,"height":400,"caption":"Data Compliance Strategies"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/data-storage\/data-compliance-strategies\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/data-storage\/"},{"@type":"ListItem","position":2,"name":"Data Compliance Strategies: 10 Best Practices to Consider"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/data-storage\/#website","url":"https:\/\/solutionsreview.com\/data-storage\/","name":"Best Enterprise Data Storage Software, Solutions, Vendors and Platforms","description":"Data Storage Buyers Guide and Best Practices","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/data-storage\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/data-storage\/#\/schema\/person\/915af6e19c43ce6b416c5860764da815","name":"Andy Stone","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/data-storage\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/e0d8d7d92eb9b77f019f026b516d135b?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e0d8d7d92eb9b77f019f026b516d135b?s=96&d=mm&r=g","caption":"Andy Stone"},"description":"Andy Stone is an accomplished IT executive with a passion for technology and creating innovative solutions that solve business problems and deliver results. As CTO-Americas at Pure Storage, Andy is focused on delivering next-gen data storage and protection technologies that help companies get better insights, improve time-to-market, and make breakthroughs.","url":"https:\/\/solutionsreview.com\/data-storage\/author\/astone\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/data-storage\/wp-json\/wp\/v2\/posts\/982"}],"collection":[{"href":"https:\/\/solutionsreview.com\/data-storage\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/data-storage\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/data-storage\/wp-json\/wp\/v2\/users\/134"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/data-storage\/wp-json\/wp\/v2\/comments?post=982"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/data-storage\/wp-json\/wp\/v2\/posts\/982\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/data-storage\/wp-json\/wp\/v2\/media\/983"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/data-storage\/wp-json\/wp\/v2\/media?parent=982"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/data-storage\/wp-json\/wp\/v2\/categories?post=982"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/data-storage\/wp-json\/wp\/v2\/tags?post=982"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}