The Devil's in the Data: Role of Data Governance in Cyber Risk Mitigation
summary
Claims that 90% of ransomware attacks exfiltrate data, attackers run reconnaissance scripts days before encryption and copy files from open network shares to staging servers using both legitimate and illegitimate file‑transfer tools. Notes that 80% of enterprise data is unstructured and companies average 14 informal content repositories. Describes a practical program: identify data owners, create a greenfield SharePoint system of record, shrink and archive legacy stores, apply retention/deletion and then target DLP to the consolidated locations to measurably reduce exposure.
AI-written summary · about
chapters (12)
- 0:00Intro
- 4:10Ransomware Double Extortion
- 6:01The Smallest Amount of Data Loss has Significant Consequence...
- 7:38Unstructured Data is an Attractive Target
- 11:28Two Primary Objectives
- 13:31Setting a Strategy to Reduce Risk and Secure Unstructured Data
- 18:31Governance from the Top
- 20:13Rethink Retention Policies
- 24:53An Approach to Official Records
- 27:18The Importance of Communication
- 29:21Apply What You Have Learned Today
- 35:43RSAConference 2023
related talks
38mRansomware and Backups: A Multi-Layered Defense Strategy
01h 00mProtect your assets: A data protection and cyber resiliency panel
51mHow to secure your data and applications against ransomware
24mDefending the Oracle Database: responding to the threat of ransomware
06mA Battle Plan for Disaster Recovery in the Wake of Ransomare
29mPrevention as a Business Strategy
44mThe Reason Companies Fall Victim to Ransomware Isn’t What You Think
27mReality Check: Cybersecurity’s Story