2023年2月27日

2023年2月27日Piiano新報告的細節差距的最佳實踐企業保護敏感的客戶數據,特別是在處理Piiano PII,領先的數據保護和隱私公司共同創立吉爾Dabah Ariel Shiftan,發布了一個新的研究報告提供洞察企業的當前狀態姿勢和防範敏感數據泄露隱私。研究結果強調個人身份信息(PII)是沒有得到充分保護,盡管糟糕的演員的高價值目標。很可能缺乏重視導致了越來越多的敏感數據泄露。Piiano的研究表明,至少76%的參與公司PII保護不同於non-PII數據,54%不治療PII作為優先保護。先確保最重要的信息是保護和減少未經授權的披露或暴露的風險信息,可以用來識別一個個體,Piiano CEO吉爾Dabah建議優先考慮的個人身份信息,如社會安全號碼和銀行賬戶,是至關重要的。這種方法還可以幫助企業更有效地分配資源,並確保他們的隱私保護工作產生最大的影響。Piiano的調查結果也表明,盡管公司理解保護客戶數據的重要性,還不優先在公司操作作為一個獨立的問題。這反映在參與調查的公司中,隻有24%感到滿意他們目前的保護措施和80%進行數據保護有關的任務隻有當與一個明確的業務需求或請求。此外,僅有48%的受訪者表示,他們認為隱私是微分器,滯後於網絡安全的感知長期管理者優先。這些數字下劃線之間的緊張關係的意識增加隱私需求和渴望改善隱私的工具,而更廣泛的組織支持仍然是難以捉摸的。 The fact that 72% do not have high visibility into where they store PII suggests yet another area where companies could benefit from improved privacy solutions, with discovery being the most sought-after feature. Piiano’s report was based on a comprehensive survey of security and privacy leaders from over seventy different companies, most of which employ over 1,000 people. It investigated the privacy and security best practices these leaders enforce to protect the sensitive information their companies store, collect and use in order to comply with regulations and maintain customer trust. According to Dabah, “while some of our findings demonstrate enterprise security’s embrace of best privacy practices, others, such as those related to PII-handling, are cause for concern, especially in light of recent sensitive data breaches that have caused significant harm to individuals and organizations alike.” PII leaks are harmful to consumers because they can lead to identity theft, financial fraud and reputational damage to the individuals whose information is stolen. The leak of PII can also have serious consequences for enterprises, including fines, legal liabilities, losses in intellectual property and employee repercussions. Moreover, sensitive data leaks can tarnish an organization’s reputation, damage customer trust and create losses of revenue. Among the highest tier of best practice is Privacy by Design (PbD), a data protection approach ensuring that privacy is considered and implemented from the earliest stages of a project. However, Piiano’s report shows that only a handful of companies have actually attempted to build their own PbD infrastructure. This is mainly due to the enormous challenges and costs involved in setting it up, including the technical aspects of data processing as well as the organizational, legal and political framework in which data processing takes place. It also requires close collaboration between privacy and security professionals and other stakeholders involved in the design and implementation of information systems. For Dabah, these results only emphasize the importance of solutions that support the PbD process. According to Dabah privacy professionals should take heed. “Hopefully, our findings will be useful to privacy leaders by providing benchmarks and other important insights for managing privacy risks and ensuring compliance,” he said. previous post