{"id":2551,"date":"2019-04-26T10:31:21","date_gmt":"2019-04-26T14:31:21","guid":{"rendered":"https:\/\/solutionsreview.com\/security-information-event-management\/?p=2551"},"modified":"2019-04-29T10:47:54","modified_gmt":"2019-04-29T14:47:54","slug":"ftc-probe-raises-stakes-how-to-improve-your-data-protection-strategy","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/security-information-event-management\/ftc-probe-raises-stakes-how-to-improve-your-data-protection-strategy\/","title":{"rendered":"FTC Probe Raises Stakes: How to Improve Your Data Protection Strategy"},"content":{"rendered":"

\"FTC<\/p>\n

by Jim Barkdoll, CEO of Titus<\/a><\/strong><\/p>\n

In recent weeks, the Federal Trade Commission (FTC) expanded its probe into the privacy practices of tech giants to include internet service providers (ISPs) AT&T, Verizon, Comcast, and T-Mobile. <\/span><\/p>\n

This move broadens the national conversation around information handling and data security in the United States and raises the stakes for organizations across all industries. And while the conversation currently centers on ISPs, make no mistake \u2013 every business should now be working to strengthen their data security strategy.<\/span><\/p>\n

\t\t\t

\"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\n

Until the FTC probes, many people hadn\u2019t realized just how much data is bought and sold between large businesses\u2014information such as real estate data, buying trends, healthcare information, and much more. In fact, there is an entire industry of marketing companies built on how much data they can obtain and then sell.<\/span><\/p>\n

Once personal data moves beyond the organization that originally acquired it\u2014and to which the person willingly supplied it\u2014consumers can no longer track it. They no longer know what organizations have it and have no way of knowing how their PII is being used or whether policies are in place to continue protecting it.<\/span><\/p>\n

Consider what we learned about Facebook having released user passwords stored in plain text in an unprotected Excel file. This should have set off alarm bells in all corners of the country. Every company has this sort of sensitive information residing on servers, on desktops, and on tablets. Often, it\u2019s inadvertently\u2014or intentionally\u2014sent in an email to wide distribution lists and uploaded to random cloud repositories.<\/span><\/p>\n

This begs a few questions. What other documents containing personally identifiable information (PII) do most companies have? Are they being protected? Do the powers that be at these companies even know where these documents are stored?<\/span><\/p>\n

A Global Privacy Movement<\/b><\/h2>\n

GDPR<\/a> sparked a global conversation around data security and information handling and has been perhaps the most significant driver of security compliance worldwide. While organizations are challenged to understand and comply with the regulations, GDPR enforcement has triggered several other regions (including two of the world\u2019s most populous countries \u2013 Brazil and India) to begin their own privacy regulation initiatives. The FTC inquiries could be seen as a good step in this direction in the United States. \u00a0<\/span><\/p>\n

It\u2019s critical that concerns move out of the conversation phase into actual protection of information so it can\u2019t be hacked, re-used, divvied up, and sold. Many organizations did rush to put privacy statements in place before GDPR<\/a> enforcement began. That\u2019s great. <\/span><\/p>\n

However, the downside is that people must frequently agree to crazy \u201cprivacy\u201d terms to continue engaging with some businesses or using their websites. In their privacy terms, these companies say they will protect our data. But as we’ve seen with Facebook, it\u2019s not clear what steps they\u2019re taking to do this or whether these steps are sufficient.<\/span><\/p>\n

Moreover, in some privacy statements, they spell out clearly that they will indeed make our personal information available to marketers. If we opt out, we can no longer participate in whatever it is they are offering.<\/span><\/p>\n

We\u2019ve known that the risks of poor data handling are numerous\u2014costs associated with retrofitting an infrastructure that has been breached, making reparations to people whose data was compromised, legal fees and, of course, significant brand damage. But now, there is the possibility of also being scrutinized and held accountable by the FTC, which takes things to another level entirely.<\/span><\/p>\n

How can organizations ensure that they are up-to-date on the best practices for identifying and protecting sensitive data? <\/span><\/p>\n

While many countries have implemented national data regulations, the U.S. has yet to do so (and may never get to that point). On the other hand, the latest round of FTC probes could be the first step in that direction. <\/span><\/p>\n

The California Consumer Privacy Act (CCPA) is another good step but not comprehensive enough. Other states may follow suit with their own regulations. Without clear guidelines to follow, however, organizations must take on self-regulation to ensure the safety of their customers\u2019 information as well as their own critical business data.<\/span><\/p>\n

Five Steps Forward from the FTC Probe<\/b><\/h2>\n

A solid cybersecurity plan is table stakes\u2014every organization must get on board at this point. The FTC scrutiny is only likely to broaden into other industries. Here are five ways that organizations can begin to manage their data to create a foundation of protection and security.<\/span><\/p>\n

Properly Identify Data as It Is Generated<\/b><\/h3>\n

As people generate data they need be able to categorize and apply sensitivity to those data categories as is applicable. <\/span><\/p>\n

For example, does the document or email contain HR data or health information? According to your policies, does that mean the data can only be shared with certain individuals inside and even outside your organization? Combining data categories and sensitivity organizations can bring context to data protection and build effective policies.<\/span><\/p>\n

Consider a Holistic Data Strategy<\/b><\/h3>\n

Regulations do not discriminate between data types<\/span>. <\/b>To put a holistic plan in place, your organization must consider a strategy for all data types, whether it is data sitting in fields in a database or data generated by humans as text in emails and documents. A holistic strategy is a must, as it puts in place steps across a program to address all data types over time.<\/span><\/p>\n

Have Hands-On Digital Policy Managers<\/b><\/h3>\n

A person or a group of people within the organization must take responsibility for implementing data security policies. That should include overseeing policy creation by working with business leaders and department stakeholders to understand what data each area of the business generates and how it should be treated. <\/span><\/p>\n

It is integral to custom data categories unique to the business to implement the appropriate digital tools to facilitate policy adherence. They also must educate users across the organization and revisit company data handling policies on a regular basis. As the business evolves, new data requirements will emerge.<\/span><\/p>\n

Ensure All Data Security Tools Work Seamlessly Together<\/b><\/h3>\n

Rather than complicate data management and protection with another independently running tool, organizations should consider data categorization solutions that integrate with their existing security tools such as data loss prevention (DLP) technologies, cloud access security brokers (CASB) and enterprise digital rights management (EDRM) tools.<\/span><\/p>\n

Explore Machine Learning to Simplify Data Handling<\/b><\/h3>\n

Training machine learning algorithms to help users identify data within their day-to-day workflow is one way to ensure adherence to data security policies. <\/span><\/p>\n

Revisiting the policies and retraining the algorithms is an ongoing job that will help make the data categorization tools more effective. As the tools become smarter and smarter, certain aspects of policy management can be automated. But human oversight will always be important for context setting and deeper understanding of unique data types.<\/span><\/p>\n

Ultimately, businesses must be able to identify sensitive information across their enterprise\u2014at creation and at rest. They need to encrypt and protect that information when it is in motion, whether it\u2019s being emailed or uploaded to a cloud repository. And they need to apply identity and access technologies to ensure that all of their data is being shared with the appropriate people.<\/span><\/p>\n

By getting ahead of the game and implementing a foundation of data security policies that include identification and categorization for better information handling, organizations can ensure they will be ready to meet any regulations\u2014or FTC inquiries\u2014that may be coming down the pipeline.<\/span><\/p>\n

###<\/span><\/p>\n

Thanks to Jim Barkdoll, CEO of <\/i>Titus<\/i><\/a>, for his unique perspective and article!<\/i><\/strong><\/p>\n


Widget not in any sidebars
<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

by Jim Barkdoll, CEO of Titus In recent weeks, the Federal Trade Commission (FTC) expanded its probe into the privacy practices of tech giants to include internet service providers (ISPs) AT&T, Verizon, Comcast, and T-Mobile. This move broadens the national conversation around information handling and data security in the United States and raises the stakes […]<\/p>\n","protected":false},"author":41,"featured_media":2445,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[551],"tags":[353,56,95,145,1066,239,1068,112,86,306,698,21,57,22],"acf":[],"yoast_head":"\nFTC Probe Raises Stakes: How to Improve Your Data Protection Strategy<\/title>\n<meta name=\"description\" content=\"The FTC expanded its probe into the privacy practices of tech giants. What does it mean for enterprises? Jim Barkdoll, CEO of Titus, answers!\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/security-information-event-management\/ftc-probe-raises-stakes-how-to-improve-your-data-protection-strategy\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"FTC Probe Raises Stakes: How to Improve Your Data Protection Strategy\" \/>\n<meta property=\"og:description\" content=\"The FTC expanded its probe into the privacy practices of tech giants. What does it mean for enterprises? Jim Barkdoll, CEO of Titus, answers!\" \/>\n<meta property=\"og:url\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/ftc-probe-raises-stakes-how-to-improve-your-data-protection-strategy\/\" \/>\n<meta property=\"og:site_name\" content=\"Best Information Security SIEM Tools, Software, Solutions & Vendors\" \/>\n<meta property=\"article:published_time\" content=\"2019-04-26T14:31:21+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2019-04-29T14:47:54+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/02\/Mechanical-Eye-MOD.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"433\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Ben Canner\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/ftc-probe-raises-stakes-how-to-improve-your-data-protection-strategy\/\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/ftc-probe-raises-stakes-how-to-improve-your-data-protection-strategy\/\",\"name\":\"FTC Probe Raises Stakes: How to Improve Your Data Protection Strategy\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/ftc-probe-raises-stakes-how-to-improve-your-data-protection-strategy\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/ftc-probe-raises-stakes-how-to-improve-your-data-protection-strategy\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/02\/Mechanical-Eye-MOD.jpg\",\"datePublished\":\"2019-04-26T14:31:21+00:00\",\"dateModified\":\"2019-04-29T14:47:54+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"The FTC expanded its probe into the privacy practices of tech giants. What does it mean for enterprises? Jim Barkdoll, CEO of Titus, answers!\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/ftc-probe-raises-stakes-how-to-improve-your-data-protection-strategy\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/security-information-event-management\/ftc-probe-raises-stakes-how-to-improve-your-data-protection-strategy\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/ftc-probe-raises-stakes-how-to-improve-your-data-protection-strategy\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/02\/Mechanical-Eye-MOD.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/02\/Mechanical-Eye-MOD.jpg\",\"width\":800,\"height\":433,\"caption\":\"Predictions: The Top SIEM Threats of 2021 (And How to Prevent Them)\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/ftc-probe-raises-stakes-how-to-improve-your-data-protection-strategy\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"FTC Probe Raises Stakes: How to Improve Your Data Protection Strategy\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/\",\"name\":\"Best Information Security SIEM Tools, Software, Solutions & Vendors\",\"description\":\"Buyer's Guide and Best Practices\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"FTC Probe Raises Stakes: How to Improve Your Data Protection Strategy","description":"The FTC expanded its probe into the privacy practices of tech giants. What does it mean for enterprises? Jim Barkdoll, CEO of Titus, answers!","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/security-information-event-management\/ftc-probe-raises-stakes-how-to-improve-your-data-protection-strategy\/","og_locale":"en_US","og_type":"article","og_title":"FTC Probe Raises Stakes: How to Improve Your Data Protection Strategy","og_description":"The FTC expanded its probe into the privacy practices of tech giants. What does it mean for enterprises? Jim Barkdoll, CEO of Titus, answers!","og_url":"https:\/\/solutionsreview.com\/security-information-event-management\/ftc-probe-raises-stakes-how-to-improve-your-data-protection-strategy\/","og_site_name":"Best Information Security SIEM Tools, Software, Solutions & Vendors","article_published_time":"2019-04-26T14:31:21+00:00","article_modified_time":"2019-04-29T14:47:54+00:00","og_image":[{"width":800,"height":433,"url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/02\/Mechanical-Eye-MOD.jpg","type":"image\/jpeg"}],"author":"Ben Canner","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/ftc-probe-raises-stakes-how-to-improve-your-data-protection-strategy\/","url":"https:\/\/solutionsreview.com\/security-information-event-management\/ftc-probe-raises-stakes-how-to-improve-your-data-protection-strategy\/","name":"FTC Probe Raises Stakes: How to Improve Your Data Protection Strategy","isPartOf":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/ftc-probe-raises-stakes-how-to-improve-your-data-protection-strategy\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/ftc-probe-raises-stakes-how-to-improve-your-data-protection-strategy\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/02\/Mechanical-Eye-MOD.jpg","datePublished":"2019-04-26T14:31:21+00:00","dateModified":"2019-04-29T14:47:54+00:00","author":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"The FTC expanded its probe into the privacy practices of tech giants. What does it mean for enterprises? Jim Barkdoll, CEO of Titus, answers!","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/security-information-event-management\/ftc-probe-raises-stakes-how-to-improve-your-data-protection-strategy\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/security-information-event-management\/ftc-probe-raises-stakes-how-to-improve-your-data-protection-strategy\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/ftc-probe-raises-stakes-how-to-improve-your-data-protection-strategy\/#primaryimage","url":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/02\/Mechanical-Eye-MOD.jpg","contentUrl":"https:\/\/solutionsreview.com\/security-information-event-management\/files\/2019\/02\/Mechanical-Eye-MOD.jpg","width":800,"height":433,"caption":"Predictions: The Top SIEM Threats of 2021 (And How to Prevent Them)"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/ftc-probe-raises-stakes-how-to-improve-your-data-protection-strategy\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/security-information-event-management\/"},{"@type":"ListItem","position":2,"name":"FTC Probe Raises Stakes: How to Improve Your Data Protection Strategy"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#website","url":"https:\/\/solutionsreview.com\/security-information-event-management\/","name":"Best Information Security SIEM Tools, Software, Solutions & Vendors","description":"Buyer's Guide and Best Practices","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/security-information-event-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/security-information-event-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/security-information-event-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/2551"}],"collection":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/comments?post=2551"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/posts\/2551\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media\/2445"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/media?parent=2551"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/categories?post=2551"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/security-information-event-management\/wp-json\/wp\/v2\/tags?post=2551"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}