DPDP enforcement will expose the gap between data policies and data reality
By Nilesh Bhojani, Chief Product and Technology Officer, Seclore
Most enterprises have data policies. Very few have proof that those policies are working.
That distinction is about to matter in ways it hasn’t before. When the Data Protection Board of India moved from DPDP consultation to enforcement standards earlier this year, it changed the question enterprises are being asked to answer. Not: what does your policy say? But: what actually happened to your data?
For most organisations, that is a question they cannot answer. And the gap between intent and demonstrable outcome is larger than most leadership teams realise.
The risk that isn’t being measured
There is a persistent assumption in enterprise security that risk is primarily external. Breaches. Attackers. Compromised credentials. The safeguards most organisations have built are designed around this model.
But the most material data risks today originate inside the organisation, through legitimate access.
A finance analyst...
Copyright of this story solely belongs to expresscomputer.in. To see the full text click HERE
