{"id":1814,"date":"2014-10-13T15:44:51","date_gmt":"2014-10-13T15:44:51","guid":{"rendered":"http:\/\/techtonictimes.com\/?p=1814"},"modified":"2014-10-14T13:34:21","modified_gmt":"2014-10-14T13:34:21","slug":"heck-hindsight-data-security-demands-foresight","status":"publish","type":"post","link":"https:\/\/www.abrahamsconsulting.com\/blog\/heck-hindsight-data-security-demands-foresight\/","title":{"rendered":"To Heck With Hindsight, Data Security Demands Foresight Home Depot"},"content":{"rendered":"

\"Data<\/a>
\nWould you agree that there is a certain appeal to having hindsight? Does the appeal hold when you think of data security?<\/a><\/p>\n

Your<\/em> data security?<\/h6>\n

I grew up hearing that hindsight is 20\/20.<\/p>\n

Because I have always relied on glasses, the idea of having 20\/20 vision gets my attention.<\/p>\n

I want 20\/20 vision.<\/p>\n

But, I want\u00a0 more than that\u00a0 for my data. I want foresight.<\/p>\n

Don’t you?<\/p>\n

If you shop, or have ever shopped at Home Depot, I bet you do.<\/p>\n

Accortding to an IT ProPortal article,\u00a0 Home Depot’s Customer Hack, Many Times Larger Than Target’s Breach<\/a>,”\u00a0 the company reported that it is looking into \u201cunusual activity\u201d with the help of banks and law enforcement authorities to try to work out what hackers pilfered.”<\/p>\n

How is that consolation nugget sitting in your stomach?<\/p>\n

Here is another exercise in hindsight:<\/p>\n

Paula Drake, Home Depot’s spokesperson said that, \u201cProtecting our customers\u2019 information is something we take extremely seriously, and we are aggressively gathering facts at this point while working to protect customers.<\/p>\n

“Extremely seriously,” Paula?<\/p>\n

How extreme is that?<\/p>\n

Does it include a solution like Guardium that protects databases and provides real time information about who\u00a0 has access to customers data and who should not?<\/p>\n

Does your extreme also protect from the privileged user? Does it provide automated compliance?<\/p>\n

Paula, your ‘extreme’ needs visibility into the the following:<\/p>\n

    \n
  1. Who has access to my data?<\/li>\n
  2. Who should not have access to my data?<\/li>\n
  3. How was my data accessed?<\/li>\n
  4. When was my data accessed and for how long?<\/li>\n
  5. What controls are in place to protect from the privileged user?<\/li>\n<\/ol>\n

    This is data security. This is foresight.<\/p>\n

    And if you won’t take my word for it, maybe you will listen to this account:<\/p>\n

    \u201c <\/span> The responsibility of the Santiago Stock Exchange is to maintain the data in a very secured environment. We use Guardium to protect our clients\u2019 data from unauthorized access. \u201d\u00a0 <\/span>Andr\u00e9s Araya Falcone, Santiago Stock Exchange<\/em><\/p>\n

    <\/div>\n

    Here is a preview of what foresight looks like.<\/p>\n