Connect with us

Hi, what are you looking for?

Investing

Unstructured data growth poses hidden cloud security and compliance risk

There’s an often-repeated stat that 90% of all data that exists today has been created in the last two years.

The provenance of that figure is murky and disputed, and it dates back to nearly 10 years ago, so even if it was true then, that percentage is likely even higher today. But what can’t be disputed is that the exponential growth of information continues. IDC predicts the total sum of the world’s data will by 175 zettabytes by 2025 – up from 33 zettabytes in 2018.

Within that overall data growth, the increasing amount of unstructured data creates security and compliance risks. Up to 90% of data that organisations own is now estimated to be unstructured and growing at 55-65% each year. This includes things like documents, spreadsheets, photos, videos, audio, web pages, text files, social media and slide presentations, which can contain sensitive or personally identifiable information (PII) that is difficult to track and manage.

For example, people might keep passwords for all of their applications in an unencrypted or password-free Excel file and then store that in a folder on OneDrive because they think it’s secure. Or someone might take a photo or scan of their passport, which contains lots of PII, for a job or visa application and share with HR, which consequently stores it on OneDrive, or SharePoint. We’ve all done these things and it’s so easy to do without really thinking about it.

Data classification and compliance risk

The problem with this unstructured data is that it doesn’t live in a database and have a pre-defined data model or schema. Whereas structured data in a database is more easily classified and managed, it’s difficult to know what the content of a video or a spreadsheet is and whether it contains passwords or PII.

This creates a data governance risk – particularly in highly regulated industries such as healthcare, financial services and government that have a duty to comply with data protection legislation and regulations such as the US Health Insurance Portability and Accountability Act (HIPAA) and the Sarbanes-Oxley Act (SOX).

There is also a security risk. Many existing data classification tools can’t tell you if, for example, a Word file is infected by a macro virus. So not only do you need to be able to classify your unstructured data across your cloud environment and identify any containing PII or sensitive data, but you also need to be able to scan that information for security threats.

Cloud data governance challenges

Another factor that creates data governance challenges around unstructured data is the widespread adoption of cloud. Instead of all this data being stored on laptops, PCs, file servers and network attached storage (NAS), it is now being stored in cloud platforms such as Office 365 or Google Workspace as organisations move away from on-premises infrastructure. Many companies are even configuring laptops and systems so staff can only save data onto OneDrive.

But in the process of this cloud migration, organisations are not taking the time to sort their data out. It is just lift and shift. They are literally moving a pile of unstructured data from one place to another. This just moves the problem rather than addressing the core issues around lack of visibility.

Of course, there are data classification tools that have been out in the market for many years. But they haven’t kept pace with the times and weren’t designed for the cloud, so there are gaps in functionality and capability. One tool might report on your data but doesn’t fix it. Another will fix it and organise it into a more structured fashion, but only works on one platform.

A lot of these older products also aren’t compatible with the latest file formats and can’t do optical character recognition (OCR). For example, if you want to check and classify something like a photo of a passport you need OCR to automatically parse the image and capture name, passport number, address and other PII into a text format instead of an image format.

You also need a modern tool that can redact any personal or sensitive information as it classifies. The tool needs to detect and flag that information for the administrator but redact it so it can’t be viewed.

This growth in unstructured data is only going to continue, and organisations must get to grips with classification and governance across their cloud environments so they can identify and protect sensitive information and avoid costly or damaging security and compliance breaches.

By Phil Maynard, VP, Barracuda Networks

 

Read more:
Unstructured data growth poses hidden cloud security and compliance risk

Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Get the daily email that makes reading the news actually enjoyable. Stay informed and entertained, for free.
Your information is secure and your privacy is protected. By opting in you agree to receive emails from us. Remember that you can opt-out any time, we hate spam too!

Latest

Economy

THE SENATE on Monday ratified the Bicameral Conference Committee report on a measure that seeks to lower the minimum investment hurdle for foreign retailers...

Economy

The Philippines is one of 17 countries that have kept schools fully closed since the pandemic began, according to a report released by the...

Economy

Workers are busy cleaning in preparation for the restaurant’s reopening in Marikina City. — PHILIPPINE STAR/ MICHAEL VARCAS THE RESTAURANT industry is anticipating some...

Economy

EXCISE TAX collections from cigarettes jumped by 31% to P83 billion in the first seven months, with more than half coming from Philip Morris...

Investing

The world’s largest franchisor of home service brands, has announced the acquisition of Pimlico Plumbers, central London’s leading independent residential and commercial service and...

Economy

MEGAWORLD Corp. will be spending P40 billion to develop an eco-tourism township in Palawan in the next 10 to 15 years, Andrew L. Tan’s...

You May Also Like

Investing

Having a good Instagram marketing agency to back up your Instagram account is an absolute must going into the new year. With competition stronger...

Economy

Ivermectin, an existing drug against parasites including head lice, has had a checkered history when it comes to treating COVID-19. The bulk of studies...

Investing

As a traditionally rigid insurance industry becomes bogged down by antiquated processes and operations, a handful of industry leaders are seeking to shake things...

Economy

US President Joseph R. Biden, Jr., will rely on ally countries to supply the bulk of the metals needed to build electric vehicles and focus on...

Disclaimer: SmartRetirementReport.com, its managers, its employees, and assigns (collectively "The Company") do not make any guarantee or warranty about what is advertised above. Information provided by this website is for research purposes only and should not be considered as personalized financial advice. The Company is not affiliated with, nor does it receive compensation from, any specific security. The Company is not registered or licensed by any governing body in any jurisdiction to give investing advice or provide investment recommendation. Any investments recommended here should be taken into consideration only after consulting with your investment advisor and after reviewing the prospectus or financial statements of the company.

Copyright © 2021 SmartRetirementReport. All Rights Reserved.

Get the daily email that makes reading the news actually enjoyable. Stay informed and entertained, for free.



Your information is secure and your privacy is protected. By opting in you agree to receive emails from us. Remember that you can opt-out any time, we hate spam too!