How can you protect your data if you don’t know where it is?
The answer is you can’t. Rick DeLoach, Deputy CISO at ADT, joins Ward on this week’s episode to discuss the crucial aspects of data security and governance. Rick shares his two decades of experience in the field, emphasizing the importance of data discovery, classification, and the implementation of structured programs involving process, policy, and technology. The conversation also covers the challenges of integrating AI technologies within organizations and the significance of ongoing business alignment to enhance security practices. Lastly, Rick's journey from finance student to cybersecurity leader offers valuable insights and advice for aspiring professionals in the field.
Takeaways:
- Start with Data Discovery and Classification: You can't protect what you don't know you have. Begin by inventorying and classifying your data assets.
- Establish Strong Governance and Policy Frameworks: Before investing in technology, ensure you have clear, organization-wide policies and processes for data handling and security.
- Align Security with Business Needs: Engage business stakeholders to understand what data is most critical, why it matters, and the impact if it’s lost or exposed.
- Educate and Partner with Business Users: Move from being the “department of no” to a partner that educates and collaborates with business units on secure data practices.
- Be Proactive, Not Reactive: Build and maintain a data inventory to enable rapid response and assessment in the event of a breach or incident.
- Balance Innovation and Security: Embrace new technologies like AI, but ensure their use is governed by clear policies and risk assessments.
- Stay Adaptable: The security landscape changes rapidly—be ready to adjust your approach as new challenges and technologies emerge.
Quote of the Show:
- “You don't know how to protect something if you don't know what it is and where it's at.” - Rick DeLoach
Links:
Ways to Tune In:
