Podcast: Cloud security, compliance and data classification | Computer Weekly
Summary
Gorge also talks about the rise of increased geo-political risk and the ever-present need to mitigate against it, especially by means of data classification and cloud auditing. What we’re seeing is that organisations have a main issue right now that, whereas in the past, to set up data in the cloud you needed to go through IT, now it’s more or less self-service. So, any department in your organisation can use a credit card and start some sort of new cloud recipient, so to speak. It would be advisable for everyone to map out all the different cloud providers they have worldwide, to understand whether they need a table-top exercise on how to exit the country from a cloud perspective and then transfer the data and erase it, as much as is legally possible, from those countries you are exiting. A lot of mapping and data classification, and of course security, is a journey, not a destination, so it all needs to be done on an ongoing basis.