It's challenging to understand how to keep your data safe and secure from hackers. Whether you're moving your IT assets to the cloud, keeping them on premises, or taking a hybrid approach, data security is a top concern.
Not everybody is an IT expert, so I’ve created a list of actions that even non-technologists can take to get started:
1. Simplify the Goal—Secure Your Data
Data security is like most other IT disciplines. It’s full of arcane acronyms, complex technologies, and thousands of vendors claiming they can help. All these factors can make it difficult to confidently assess risks and solutions.
Cut through the noise. Simplify your goal to:
- Preventing unauthorized users from accessing your data, or
- If they do get access, being able to quickly detect and remove them
I’ve found that these two simple goals resonate with both technologists and business leaders. Filtering every security effort through this lens will get you off to a good start.
2. Find a Trusted Partner
Wading through countless security risks and potential solutions is a daunting task. Find a trusted security partner to help. There are plenty of boutique firms ready to lend a hand. Some of the larger, enterprise-class security vendors also have credible resources you can tap.
Don’t hesitate to leverage your own network to help find experts—your peers likely face the very same challenges. Interview potential partners just as you would an employee—it’s a critical role and relationship.
So, how do you know if you’ve found a good match? If they can both explain your security risks in plain English and how potential solutions line up with the above goals, it's a pretty good sign.
3. Don’t Install a Security Solution You Don’t Understand
The incentives to protect your data are extremely high. You may feel pressured to buy expensive solutions you don’t yet understand.
Spare yourself the headaches that come from ill-fitting and poorly implemented security solutions. Take the time to fully comprehend:
- The problems they claim to resolve
- How to successfully implement them
- How to measure the solution’s efficacy once it’s in production
If you find a trusted partner, this task becomes a little easier.
4. Educate Your Employees on Their Role in Preventing Data Breaches
Employees are often the biggest security risk in an organization. Teach them how to spot phishing and other social engineering attacks.
Education is one of the least expensive and most valuable data security measures you can take.
Staying ahead of the hackers requires regularly refreshing employee security awareness training, making security awareness part of your staff training and development, and—ultimately—establishing clear, security-related goals for everyone.
5. Weave Security Into Your Daily Operations
Learn how to read the reports that your security vendors and systems generate. Make sure you know what actions to take based on the information they provide.
Walk around the office and ask your colleagues if they’ve received any suspicious emails. Ask your trusted partner (see #2 above) to teach your employees about some of the current top security threats and how to react to them.
Bottom line—do at least one very visible thing every single day to keep security top of mind in your organization.
6. Identify Problems, Fix Them, and Confirm They’re Fixed
Once a security issue is brought to your attention, never leave it unexamined. Set a great example by taking each one seriously. Even simple issues like phishing emails can balloon into something very damaging if left unremedied. You should only check issues off your list of to-dos when you know for sure that the risk has been satisfactorily addressed.
7. Pin This Data Security Checklist in Your Office or Cube
It’s easy to lose sight of data security. You have a million things demanding your attention every day. Tie a string around your finger, put your watch on your other wrist, or better yet, print this list and tape it to your office or cube wall.
