Most of us are still working from home, at least here in Sweden where the recommendation still stands, and in many countries the numbers are starting to go up again. It means our information is spread out more than ever, on laptops, home printers and in a dozen cloud services.<\/p>\n
Which brings me to information classification. Almost every company I meet has a policy that says information should be classified as Public, Internal, Confidential and Secret, or something similar. Very few can tell me what actually happens when a document is marked Confidential.<\/p>\n
That is the problem. A classification that only exists on paper doesn\u00b4t protect anything. For it to work there needs to be a technical component that acts on the label. When a document is marked Confidential it should be encrypted, it should only be possible to open for the right people and it shouldn\u00b4t be possible to send it to a private mail address. And the protection should follow the document, wherever it goes.<\/p>\n
The tools exist. Sensitivity labels and Azure Information Protection can do exactly this, and there are others. Start with automatic labelling of the obvious stuff, like personal identity numbers and credit cards, and let the users label the rest.<\/p>\n
A label without protection is just a sticker.<\/p>\n","protected":false},"excerpt":{"rendered":"
Most of us are still working from home, at least here in Sweden where the recommendation still stands, and in many countries the numbers are starting to go up again. It means our information is spread out more than ever, on laptops, home printers and in a dozen cloud services. Which brings me to information […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[4,14,13],"tags":[74,73,23],"class_list":["post-1217","post","type-post","status-publish","format-standard","hentry","category-security-architecture","category-security-metrics","category-technology","tag-data-protection","tag-information-classification","tag-zero-trust"],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1217","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1217"}],"version-history":[{"count":1,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1217\/revisions"}],"predecessor-version":[{"id":1245,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1217\/revisions\/1245"}],"wp:attachment":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1217"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1217"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1217"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}