登录查看更多内容

How do you promote data security culture?

由人工智能和领英社区提供技术支持

Data security is a crucial aspect of data governance, as it ensures the confidentiality, integrity, and availability of data assets. However, data security is not only a technical or regulatory issue, but also a cultural one. How do you promote a data security culture in your organization, where everyone understands and follows the best practices and policies for protecting data? Here are some tips to help you foster a data security mindset among your employees, stakeholders, and partners.

此文章中的业界达人

由社区从 10 条内容中精选。了解更多

Kim H?rby Fredborg

Jurist | DPO | IT-studerende (Datamatiker) | Informationssikkerhed | FIP, CIPT, CIPP/E, CIPM
Nikko Paolo Bautista, IE, MMHoA, FISQua

FISQua-Quality&Safety | Data Privacy | Digital Transformation | Risk and Compliance | Governance | Open Network LION

1 Define data security roles and responsibilities

One of the first steps to promote a data security culture is to clearly define the roles and responsibilities of different data actors, such as data owners, data custodians, data stewards, data users, and data auditors. Each role should have a specific set of tasks and accountabilities related to data security, such as identifying data risks, implementing data controls, monitoring data compliance, and reporting data incidents. By defining data security roles and responsibilities, you can establish a clear governance structure and accountability framework for data security.

添加您的观点

Nikko Paolo Bautista, IE, MMHoA, FISQua

FISQua-Quality&Safety | Data Privacy | Digital Transformation | Risk and Compliance | Governance | Open Network LION
举报内容
In terms of defining the data security roles and responsibilities, it is imperative that a data protection officer be appointed to oversee such endeavors. Given the significant workload that top management must manage, it is imperative that the CEO/President be assigned a Data Protection Officer who can assist in accurately defining the roles and responsibilities of all stakeholders within the organization. #dataprivacy #cybersecurity

已翻译

赞
Kim H?rby Fredborg

Jurist | DPO | IT-studerende (Datamatiker) | Informationssikkerhed | FIP, CIPT, CIPP/E, CIPM
举报内容
Defining the data security roles and responsibilities can be a big, tough task. What roles and responsibilities do we need? Inspiration can be found in various standards (such as ISO) but make sure to always fit in to your organization, so it doesn't end up with roles and responsibilities that are irrellevant and/or superflouous.

已翻译

赞

2 Educate and train data actors

Another key step to promote a data security culture is to educate and train data actors on the importance, principles, and practices of data security. Data actors should be aware of the data security policies and standards that apply to their roles, as well as the potential consequences of data breaches and violations. Data actors should also be trained on how to use data security tools and techniques, such as encryption, authentication, authorization, backup, and recovery. By educating and training data actors, you can increase their data security knowledge and skills, as well as their data security awareness and attitude.

添加您的观点

Nikko Paolo Bautista, IE, MMHoA, FISQua

FISQua-Quality&Safety | Data Privacy | Digital Transformation | Risk and Compliance | Governance | Open Network LION
举报内容
In terms of education, I can suggest the use of online platforms for playing recorded materials in educating towards data security, especially if you have challenging times conducting a mass lecture for data security. #dataprivacy #cybersecurity #learningandevelopment #training

已翻译

赞
Breno Serpa

DPO | Lead Implementer e Auditor ISO 27001 | Governan?a de TI | Membro da APDADOS
举报内容
A educa??o e treinamento por meios digitais podem auxiliar na dissemina??o do conhecimento, porém acredito que o contato pessoal seja a melhor forma de repassar os conhecimentos e treinar as pessoas quanto a privacidade e seguran?a dos dados. Acredito que o treinamento presencial seja mais proveitoso que o digital, pois é possível criar la?os e dar um rosto a área de privacidade. Seres humanos s?o sociáveis por natureza, ou seja, se interessam por outros seres humanos.

已翻译

赞

3 Communicate and collaborate on data security

A third step to promote a data security culture is to communicate and collaborate on data security issues and initiatives across the organization. Data actors should be encouraged to share data security best practices, challenges, and solutions with each other, as well as with external stakeholders and partners. Data actors should also be involved in data security decision-making and feedback processes, such as data security audits, reviews, and improvements. By communicating and collaborating on data security, you can create a data security community and a data security culture of trust and transparency.

添加您的观点

Nikko Paolo Bautista, IE, MMHoA, FISQua

FISQua-Quality&Safety | Data Privacy | Digital Transformation | Risk and Compliance | Governance | Open Network LION
举报内容
In terms of developing your information security systems, you should develop data security champions that would help in executing all the data security plans and programs that you have prepared to have proper communication and collaboration among your colleagues. #dataprivacy #cybersecurity #collaboration #communication

已翻译

赞
Kim H?rby Fredborg

Jurist | DPO | IT-studerende (Datamatiker) | Informationssikkerhed | FIP, CIPT, CIPP/E, CIPM
举报内容
Data Protection people, Information Security people and other 'data actors' can have widely different professional and personal backgrounds. Make sure to include employees/stakeholders the the data security issues and initiatives - if possible - who has interest in data security but might not be a 'data actor' at moment. They can be good data security champions and might some day end up working in the area. At that point they will also be grateful for you to involve them in the process meaning you now have an important ally.

已翻译

赞
Breno Serpa

DPO | Lead Implementer e Auditor ISO 27001 | Governan?a de TI | Membro da APDADOS
举报内容
Na minha experiência profissional, a melhor forma de comunicar e fazer com que haja colabora??o dos envolvidos é através de atividades lúdicas como gincanas, quiz, jogos. Outra a??o é a cria??o de um canal de comunica??o central para que os envolvidos possam buscar solu??es, sanar dúvidas e interagir com os especialistas, pode ser chat, blog, site ou e-mail.

已翻译

赞

4 Recognize and reward data security behavior

A fourth step to promote a data security culture is to recognize and reward data security behavior among data actors. Data actors should be acknowledged and appreciated for their data security contributions and achievements, such as complying with data security policies, reporting data security incidents, or suggesting data security improvements. Data actors should also be incentivized and motivated to maintain and enhance their data security performance, such as through recognition programs, incentives schemes, or career development opportunities. By recognizing and rewarding data security behavior, you can foster a data security culture of recognition and reward.

添加您的观点

Breno Serpa

DPO | Lead Implementer e Auditor ISO 27001 | Governan?a de TI | Membro da APDADOS
举报内容
Tenho a experiência de realiza??o de eventos anuais com gincanas e distribui??o de brindes através de jogos como pergunta e resposta que ajudam a recompensar os participantes que participaram e absorveram os conteúdos.

已翻译

赞

5 Monitor and measure data security outcomes

A fifth step to promote a data security culture is to monitor and measure data security outcomes in the organization. Data actors should be able to track and evaluate their data security progress and impact, such as through data security metrics, indicators, and dashboards. Data actors should also be able to identify and address data security gaps and opportunities, such as through data security audits, assessments, and action plans. By monitoring and measuring data security outcomes, you can cultivate a data security culture of monitoring and measurement.

添加您的观点

Breno Serpa

DPO | Lead Implementer e Auditor ISO 27001 | Governan?a de TI | Membro da APDADOS
举报内容
Uma maneira que utilizado para medir e monitorar os resultados é através de treinamentos e aplica??o de testes com nota mínima para aprova??o e caso o participante n?o atinja a nota deverá refazer o treinamento e o teste. Nossa meta é no mínimo 90% de aprovados nesse teste.

已翻译

赞

6 Learn and improve from data security experiences

A sixth step to promote a data security culture is to learn and improve from data security experiences in the organization. Data actors should be able to learn from their data security successes and failures, as well as from the data security experiences of others, such as through data security lessons learned, case studies, and best practices. Data actors should also be able to improve their data security capabilities and processes, such as through data security innovation, experimentation, and optimization. By learning and improving from data security experiences, you can nurture a data security culture of learning and improvement.

添加您的观点

Kim H?rby Fredborg

Jurist | DPO | IT-studerende (Datamatiker) | Informationssikkerhed | FIP, CIPT, CIPP/E, CIPM
举报内容
In my experience it is important to promote a work culture where people feel safe reporting security incidents. If people are punished for reporting an incident (their own or not), they will refrain from reporting again the next time. Future incidents could be at risk of becoming worse than they would otherwise be, because they were not reported and handled correctly.

已翻译

赞

7 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?

添加您的观点

Data Governance

+ 关注

给文章评分

我们借助人工智能创建了此文章。您认为这篇文章怎么样？

很棒不太好

举报此文章

查看全部

How do you promote data security culture?

1

2

3

4

5

6

7

1 Define data security roles and responsibilities

2 Educate and train data actors

3 Communicate and collaborate on data security

4 Recognize and reward data security behavior

5 Monitor and measure data security outcomes

6 Learn and improve from data security experiences

7 Here’s what else to consider

Data Governance

给文章评分

感谢您的反馈

更多Data Governance相关文章

更多相关阅读内容

How do you promote data security culture?

1

2

3

4

5

6

7

1 Define data security roles and responsibilities

2 Educate and train data actors

3 Communicate and collaborate on data security

4 Recognize and reward data security behavior

5 Monitor and measure data security outcomes

6 Learn and improve from data security experiences

7 Here’s what else to consider

Data Governance

给文章评分

感谢您的反馈

查看其他技能