| | APRIL - 2018ENTERPRISE SECURITY8IN MY OPINIONFINDING SYNERGY BETWEEN CYBERSECURITY ANDDATADATADATADATABy Lester Godsey, Chief Information Security Officer, City of Mesa, AZArguably, the two `hottest' trends in business, both cybersecurity and data management is often looked upon as separate strategic efforts within an organization. What many fail to realize is that they are not as disparate as they initially appear and, if your CISO and CDO collaborate, there are strategic synergies to be had. Below are just a few examples:Data ClassificationData classification is specifically called out in both disciplines. For example, in NIST (National Institute of Standards and Technology) SP 800-53 Rev. 4, data classification is a core tenet. The NIST cybersecurity framework is one of the most popular across all sectors. In DAMA's (Data Management Association) DMBOK (Data Management Body of Knowledge) Second Edition, data classification is a component of the Data Security knowledge area. Another way of talking about data classification is that both cybersecurity and data management need to be able to apply classification to an organization's data to know what to do with it, how to treat it and how to protect it. Think of data classification in terms of tags­in an ideal environment, your accounting
< Page 7 | Page 9 >