A simple question for management after five months of working from home: Where is your company\u00b4s most sensitive information right now?<\/p>\n
Before March you probably thought you knew. It was on the file servers, in the business systems and maybe on a few laptops. Since then your staff have been downloading, sharing and printing from their kitchen tables. Some of it is on private computers. Some of it is in cloud services that IT never approved, because people needed to collaborate and found a way.<\/p>\n
I\u00b4m not blaming anyone. People did what they had to do to keep the business running. But the information is out there now, and the policies written for an office don\u00b4t follow it home.<\/p>\n
This is why I keep saying that classification must have a technical component. It is the only thing that follows the information. A policy in the intranet doesn\u00b4t.<\/p>\n
So, ask your security department three things. Do we know what our most sensitive information is? Do we know where it is? And is it protected by something more than a rule in a document?<\/p>\n
If the answers are no, that is your next investment, not another firewall.<\/p>\n
You can\u00b4t protect what you can\u00b4t find.<\/p>\n","protected":false},"excerpt":{"rendered":"
A simple question for management after five months of working from home: Where is your company\u00b4s most sensitive information right now? Before March you probably thought you knew. It was on the file servers, in the business systems and maybe on a few laptops. Since then your staff have been downloading, sharing and printing from […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[11,4],"tags":[38,73,34],"class_list":["post-1218","post","type-post","status-publish","format-standard","hentry","category-business","category-security-architecture","tag-business","tag-information-classification","tag-remote-work"],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1218","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1218"}],"version-history":[{"count":1,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1218\/revisions"}],"predecessor-version":[{"id":1246,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=\/wp\/v2\/posts\/1218\/revisions\/1246"}],"wp:attachment":[{"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1218"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1218"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crowmoor.se\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1218"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}