by Jesper Kråkhede, Sweden
Posted in Business, Security Architecture on Sep 5th, 2020
Following my last post, a word to management about the cost of information classification. I have seen several classification projects that ran for years, produced impressive documents with five or six levels and a matrix of handling rules, and then never got used. The users didn´t understand the difference between level three and four, so […]
Posted in Security Architecture, Security metrics, Technology on Sep 4th, 2020
I have a theorem I have been pushing for many years. Information classification as we know it is an effect of security being expensive. Think about where it comes from. Governments and the military classified information because protecting it cost money. Safes, guards, couriers, cleared staff, separate networks. You couldn´t afford to protect everything at […]
Posted in Business, Security Architecture on Aug 26th, 2020
A simple question for management after five months of working from home: Where is your company´s most sensitive information right now? Before March you probably thought you knew. It was on the file servers, in the business systems and maybe on a few laptops. Since then your staff have been downloading, sharing and printing from […]
Posted in Security Architecture, Security metrics, Technology on Aug 23rd, 2020
Most of us are still working from home, at least here in Sweden where the recommendation still stands, and in many countries the numbers are starting to go up again. It means our information is spread out more than ever, on laptops, home printers and in a dozen cloud services. Which brings me to information […]