There are many levels of security in our lives. Wearing a jacket to protect you from wind, cold, or rain is a layer of protection. An umbrella adds another layer. Being under a bus stop shelter adds more, and being inside an office or a house is another layer of protection.
Data lifecycle
With regard to data security, companies can have varying levels of protection. It is very common among businesses to follow a data lifecycle and move new files from use to storage in the system, to archive or long-term storage. For example, a contract is written to work with Company X; it is printed, filed in an in-progress area, removed from the file cabinet for signatures, work to be marked completed, and then filed in a completed area. After a while the completed files are moved to an archival storage area. Perhaps after a time the archives are destroyed.
As you can see, there is a lifecycle for data and security in each stage is not equally important. If the contract were lost or stolen while it was actively being worked on, that would be far worse than if it were stolen from an archive. Digital data can also be stolen in various stages of use and needs different levels of security at each one.
Defense-in-depth
Physical locks on file cabinets, office desks, and production areas can protect the contract as it works its way through the process. On top of that there would be some rules about who has keys and access to those file drawers, rooms, and offices. There might also be digital locks at the building access doors, cameras throughout the building, or other ways to monitor access and keep information secured.
How much security and of what kind will vary from company to company, but the main idea is to have what is called defense-in-depth. This reflects the same layering as jacket, umbrella, shelter, building or locked drawer in locked room in locked building and limited access to keys. There are many simple ways to protect data which small businesses can implement without much cost. For large, enterprise level companies, there are other tools that can cost more. Protect at the highest level you can afford while making a profit.
Simple ways to protect online data include using a VPN for employees to access company files while off premises. Keeping up with current patches and updates on all software is another low-cost security measure. For other ways to protect your business’s digital data, a quick online search will give a multitude of suggestions.
If you have questions about why or how these measures help secure your data, or why it is important to do so, drop me a comment and let’s talk.