--- title: "Data Centric World: Zen and the Art of Data Protection" description: "Data Centric World: Zen and the Art of Data Protection" --- [![Aujas Logo-1](https://blog.aujas.com/hs-fs/hubfs/Aujas%20Logo-1.webp?width=951&name=Aujas%20Logo-1.webp "Aujas Logo-1")](https://www.aujas.com/) - Services - [Identity and Access Management](https://www.aujas.com/robotics-iam-identity-access-management-services) - [Identity Governance Fast Track](https://www.aujas.com/iam-identity-governance-fast-track) - [Privileged Identity Management Fast Track](https://www.aujas.com/privileged-identity-management) - [Cloud Single Sign-on Fast Track](https://www.aujas.com/cloud-sso) - [Robotics Driven IAM](https://www.aujas.com/robotics-iam-services) - [Risk Aware IAM](https://www.aujas.com/risk-aware-iam) - [Consumer IAM](https://www.aujas.com/consumer-identity-and-access-management) - [Cybersecurity Advisory Services](https://www.aujas.com/cybersecurity-advisory-services) - [Cyber Risk Management](https://www.aujas.com/cyber-risk-management-services) - [Integrated Compliance Management](https://www.aujas.com/cybersecurity-compliance-services) - [GRC Technology Automation](https://www.aujas.com/grc-technology-automation-services) - [Third Party Risk Management](https://www.aujas.com/third-party-risk-management) - [Privacy and Data Protection](https://www.aujas.com/data-privacy-data-protection-services) - [Security Verification](https://www.aujas.com/security-verification-services) - [On-Demand Security Assessment](https://www.aujas.com/on-demand-security-testing-and-services) - [Breach & Attack Simulation](https://www.aujas.com/automated-continuous-attack-simulation) - [IoT Security Assessment](https://www.aujas.com/internet-of-things-security-assessment) - [Red Teaming](https://www.aujas.com/red-teaming-services) - [Integrated Security Assurance Program](https://www.aujas.com/isap) - [DDoS Simulation](https://www.aujas.com/ddos-attack-simulation-services) - [DevSecOps](https://www.aujas.com/devsecops) - [API Security](https://www.aujas.com/api-security) - [Security Engineering](https://www.aujas.com/security-engineering-services) - [Secure Software Development](https://www.aujas.com/secure-software-development) - [Ecosystem Engineering](https://www.aujas.com/ecosystem-engineering) - [Custom Security Development](https://www.aujas.com/custom-security-solution-development) - [Registered Device Management Platform](https://www.aujas.com/registered-device-management-platform) - [Managed Detection and Response](https://www.aujas.com/managed-detection-and-response-services) - [Offensive Security Services](https://www.aujas.com/offensive-security-services) - [OT Security Services](https://www.aujas.com/ot-security-services) - [Microsoft Sentinel](https://www.aujas.com/sentinel) - [Threat Management](https://www.aujas.com/threat-management-service) - [SIEM & Security Monitoring](https://www.aujas.com/siem-security-monitoring) - [SecOps Orchestration](https://www.aujas.com/security-orchestration-automation-and-response) - [Google SecOps](https://www.aujas.com/googlesecops) - [Cloud Security](https://www.aujas.com/cloud-computing-security-services) - [AWS Cloud Security Services](https://www.aujas.com/aws-cloud-security-services) - [Cloud Security Foundation](https://www.aujas.com/cloud-security-foundation) - [Cloud Risk Management](https://www.aujas.com/cloud-risk-management) - [Cloud Security Engineering](https://www.aujas.com/cloud-security-engineering) - Products - [PALM](https://www.aujas.com/platform-for-access-lifecycle-management) - [Saksham](https://saksham.aujas.com) - [CodeSign](https://codesign.aujas.com) - [Aadhaar Registered Device Manager](https://www.aujas.com/registered-device-management-platform) - Company - [About us](https://www.aujas.com/about-us) - [Investor Relations](https://www.aujas.com/investor-relations) - [Team](https://www.aujas.com/team) - [Partnership](https://www.aujas.com/partnership) - [Contact us](https://www.aujas.com/contact-us) - [Careers](https://www.aujas.com/cybersecurity-careers) - Resources - [Blog](https://blog.aujas.com) - [Collaterals](https://www.aujas.com/collaterals) - [Case Studies](https://www.aujas.com/case-study) - [Contact Sales](https://www.aujas.com/contact-us) - ![](https://blog.aujas.com/hubfs/Aujas%202020/blue-search.png) ![blue-search](https://blog.aujas.com/hubfs/Aujas%202020/blue-search.png "blue-search") ![Aujas Cybersecurity Logo 2024](https://blog.aujas.com/hubfs/Aujas%20Cybersecurity%20Logo%202024.webp "Aujas Cybersecurity Logo 2024") - Services - [Identity and Access Management](https://www.aujas.com/robotics-iam-identity-access-management-services) - [Identity Governance Fast Track](https://www.aujas.com/iam-identity-governance-fast-track) - [Privileged Identity Management Fast Track](https://www.aujas.com/privileged-identity-management) - [Cloud Single Sign-on Fast Track](https://www.aujas.com/cloud-sso) - [Robotics Driven IAM](https://www.aujas.com/robotics-iam-services) - [Risk Aware IAM](https://www.aujas.com/risk-aware-iam) - [Consumer IAM](https://www.aujas.com/consumer-identity-and-access-management) - [Cybersecurity Advisory Services](https://www.aujas.com/cybersecurity-advisory-services) - [Cyber Risk Management](https://www.aujas.com/cyber-risk-management-services) - [Integrated Compliance Management](https://www.aujas.com/cybersecurity-compliance-services) - [GRC Technology Automation](https://www.aujas.com/grc-technology-automation-services) - [Third Party Risk Management](https://www.aujas.com/third-party-risk-management) - [Privacy and Data Protection](https://www.aujas.com/data-privacy-data-protection-services) - [Security Verification](https://www.aujas.com/security-verification-services) - [On-Demand Security Assessment](https://www.aujas.com/on-demand-security-testing-and-services) - [Breach & Attack Simulation](https://www.aujas.com/automated-continuous-attack-simulation) - [IoT Security Assessment](https://www.aujas.com/internet-of-things-security-assessment) - [Red Teaming](https://www.aujas.com/red-teaming-services) - [Integrated Security Assurance Program](https://www.aujas.com/isap) - [DDoS Simulation](https://www.aujas.com/ddos-attack-simulation-services) - [DevSecOps](https://www.aujas.com/devsecops) - [API Security](https://www.aujas.com/api-security) - [Security Engineering](https://www.aujas.com/security-engineering-services) - [Secure Software Development](https://www.aujas.com/secure-software-development) - [Ecosystem Engineering](https://www.aujas.com/ecosystem-engineering) - [Custom Security Development](https://www.aujas.com/custom-security-solution-development) - [Registered Device Management Platform](https://www.aujas.com/registered-device-management-platform) - [Managed Detection and Response](https://www.aujas.com/managed-detection-and-response-services) - [Offensive Security Services](https://www.aujas.com/offensive-security-services) - [OT Security Services](https://www.aujas.com/ot-security-services) - [Microsoft Sentinel](https://www.aujas.com/sentinel) - [Threat Management](https://www.aujas.com/threat-management-service) - [SIEM & Security Monitoring](https://www.aujas.com/siem-security-monitoring) - [SecOps Orchestration](https://www.aujas.com/security-orchestration-automation-and-response) - [Google SecOps](https://www.aujas.com/googlesecops) - [Cloud Security](https://www.aujas.com/cloud-computing-security-services) - [AWS Cloud Security Services](https://www.aujas.com/aws-cloud-security-services) - [Cloud Security Foundation](https://www.aujas.com/cloud-security-foundation) - [Cloud Risk Management](https://www.aujas.com/cloud-risk-management) - [Cloud Security Engineering](https://www.aujas.com/cloud-security-engineering) - Products - [PALM](https://www.aujas.com/platform-for-access-lifecycle-management) - [Saksham](https://saksham.aujas.com) - [CodeSign](https://codesign.aujas.com) - [Aadhaar Registered Device Manager](https://www.aujas.com/registered-device-management-platform) - Company - [About us](https://www.aujas.com/about-us) - [Investor Relations](https://www.aujas.com/investor-relations) - [Team](https://www.aujas.com/team) - [Partnership](https://www.aujas.com/partnership) - [Contact us](https://www.aujas.com/contact-us) - [Careers](https://www.aujas.com/cybersecurity-careers) - Resources - [Blog](https://blog.aujas.com) - [Collaterals](https://www.aujas.com/collaterals) - [Case Studies](https://www.aujas.com/case-study) - [Contact Sales](https://www.aujas.com/contact-us) - ![](https://blog.aujas.com/hubfs/Aujas%202020/blue-search.png) ![](https://blog.aujas.com/hubfs/Aujas%202020/close.png)     # Data Centric World: Zen and the Art of Data Protection - ![Tom](https://app.hubspot.com/settings/avatar/4f94ecdc8fee2d514a857e67586d01ae)[Tom](https://blog.aujas.com/author/tom) - Sep 5, 2012 - [Data Protection](https://blog.aujas.com/topic/data-protection-2) SHARE The phrase data protection conjures up all kinds of TLAs like DLP (Data Leakage Prevention) or DRM/IRM (Digital/Information Rights Management) or the newest DAM (Database Access Monitoring). What will annoy the reader more is that I am referring to all the above three letter acronyms and much more. I am referring to data protection as a state of mind rather than technology! Let me make myself clearer. [Data protection](https://www.aujas.com/data-protection.aspx) consists of three simple things, preventing undesirable disclosure, preventing unauthorized changes and ensuring availability when required (yup, and no points for guessing that I am referring to the classic 'C','I','A' triad - Confidentiality, Integrity, Availability). This sounds simple, but try adding a couple of qualification criteria like ensuring only 'authorized' people have access to data or to changing it in an 'approved' manner and see the effect. What will really get your goat is that while 'C' and 'I' have always been important, the erstwhile misfit and much ignored 'A' of the triad has assumed enormous significance, enough to put organizations in significant legal discomfiture. In most countries, with regulators (and even industry groups) ganging up and clamping down on how organizations treat data usage (general terminology for collect, use, transmit and store or otherwise), it is becoming important for organizations to figure out ways to safeguard themselves. Organizations are quick to point out that they have security controls based on ISO27001 and have implemented automated DLP (Data Leakage Protection) tools to prevent data leakage. Unfortunately the problem continues to fester with symptoms such as large number of positive & false positive leakage incidents, DLP perpetually stuck in monitoring mode, uncertainty surrounding the protection of the management team from legal hassles by the various three letter acronyms. Technology is great at solving problems, but one must realize that the problems they solve are usually of automation, agility or enforcement. In its current avatar, technology is not mature enough to learn, bridge, and solve business problems on its own. It is precisely this problem that comes back to bite organizations. It is important to ensure that the technology works effectively when a whole host of background activities and processes have to be in place and run efficiently. For a start, the organization needs to put a data classification & handling policy and guideline that helps its users identify, categorize and then manage classified data appropriately. The guideline should help the user community to identify if any law or regulation protects the data and if there are certain precautions that need to be taken while handling such data. The organization then needs to identify an appropriate strategy for selecting, implementing and sustaining technology solutions for data protection along with the right set of 'rules', logging and reports. Last but not the least, the organizations have to implement technology and processes to enforce the policies, identify potential violations, and help in investigation and closure of the findings. While the solution has been covered in a simple single paragraph above, the devil is in the implementation details. The classification policy is easy to create, but ensuring its implementation is tough. Employees have to be taught the why, what and how behind the classification policy and measures should be taken to ensure that they will actually follow the rules. Selecting the right technology can be a challenge too as in many organizations, it is hardly about the technology but mostly about minor features and use cases that disguise good old financial logic. Today the market is full of DLP players with barely any differentiation in their offerings. The critical technological decision though is determining the correct mix of DLP/IRM that is needed and whether a technology like DAM makes sense. The implementation can be the stuff of nightmares too, where all those fancy features promised by the technology vendors come to a naught for arcane reasons like users did not have managers assigned in the Active Directory! The rules require a deep understanding of the business processes and the data that they process and move. Don't get that right and an organization can be sifting through tens of thousands of incidents a day; DLP rules are a combination of trigger (keyword, regular expression, fingerprint), logic (and, or, else) and actions (allow, quarantine, encrypt, block, etc.). DRM and DAM rules just add additional layers of complexity. While the idea is simply to help organizations make better decisions by bringing to light the various facets of data protection, maybe practicing meditation will help tide over the taxing time of getting the data protection strategy and practice right. Alternatively, you could give me a call! #### Author: **Jayesh Kamath** Practice Head – IRAS, Aujas ![Footer-Logo](https://blog.aujas.com/hubfs/Aujas%202019/Footer/Footer-Logo.png "Footer-Logo") ## Reach Us [+1 201 389 9011](tel:+1%20201%20389%209011) ## Write To Us **Sales:** [contact@aujas.com](mailto:contact@aujas.com) **Jobs:** [careers@aujas.com](mailto:careers@aujas.com) **HR Queries:** [HRopsteam@aujas.com](mailto:hropsteam@aujas.com)   - [1](https://www.linkedin.com/company/aujas-cybersecurity) - [2](https://twitter.com/AujasIRM) - [3](https://www.facebook.com/AujasCybersec/?ref=py_c) - [4](https://www.youtube.com/@AujasCybersecurity) ## [Identity and Access Management](https://www.aujas.com/identity-access-management-services) - [Identity Governance Fast Track](https://www.aujas.com/iam-identity-governance-fast-track) - [PIM Fast Track](https://www.aujas.com/privileged-identity-management) - [Cloud Single Sign-on Fast Track](https://www.aujas.com/cloud-sso) - [Robotics Driven IAM](https://www.aujas.com/robotics-iam-services) - [Risk Aware IAM](https://www.aujas.com/risk-aware-iam) - [Consumer IAM](https://www.aujas.com/consumer-identity-and-access-management) ## [Cybersecurity Advisory Services](https://www.aujas.com/cybersecurity-advisory-services) - [Cyber Risk Management](https://www.aujas.com/cyber-risk-management-services) - [Integrated Compliance Management](https://www.aujas.com/cybersecurity-compliance-services) - [GRC Automation](https://www.aujas.com/grc-technology-automation-service) - [Third Party Risk Management](https://www.aujas.com/third-party-risk-management-old) - [Privacy and Data Protection](https://www.aujas.com/data-privacy-data-protection-services) ## Company - [About us](https://www.aujas.com/about-us) - [Careers](https://www.aujas.com/cybersecurity-careers) - [Contact us](https://www.aujas.com/contact-us) ## Resources - [Blog](https://blog.aujas.com) - [Collaterals](https://www.aujas.com/collaterals) - [Case Study](https://www.aujas.com/case-study) ## [Security Verification](https://www.aujas.com/security-verification-services) - [Threat Simulation](https://www.aujas.com/threat-simulations) - [loT Security](https://www.aujas.com/internet-of-things-security-assessment) - [Penetration Testing](https://www.aujas.com/crest-certified-penetration-testing-services) ## [Security Engineering](https://www.aujas.com/security-engineering-services) - [Secure Development](https://www.aujas.com/secure-software-development) - [Ecosystem Engineering](https://www.aujas.com/ecosystem-engineering) - [CodeSign Platform](https://codesign.aujas.com/) - [Custom Security Development](https://www.aujas.com/custom-security-solution-development) ## [Managed Detection and Response](https://www.aujas.com/managed-threat-detection-and-response-services) - [Threat Management](https://www.aujas.com/threat-management) - [SIEM & Security Monitoring](https://www.aujas.com/siem-security-monitoring) - [Automated & Continous Attack Simulation](https://www.aujas.com/automated-continuous-attack-simulation) - [SecOps Orchestration](https://www.aujas.com/security-orchestration-automation-and-response) - [Google SecOps](https://www.aujas.com/googlesecops) ## [Identity and Access Management](https://www.aujas.com/identity-access-management-services) - [Identity Governance Fast Track](https://www.aujas.com/iam-identity-governance-fast-track) - [PIM Fast Track](https://www.aujas.com/privileged-identity-management) - [Cloud Single Sign-on Fast Track](https://www.aujas.com/cloud-sso) - [Robotics Driven IAM](https://www.aujas.com/robotics-iam-services) - [Risk Aware IAM](https://www.aujas.com/risk-aware-iam) - [Consumer IAM](https://www.aujas.com/consumer-identity-and-access-management) ## [Cybersecurity Advisory Services](https://www.aujas.com/cybersecurity-advisory-services) - [Cyber Risk Management](https://www.aujas.com/cyber-risk-management-services) - [Integrated Compliance Management](https://www.aujas.com/cybersecurity-compliance-services) - [GRC Automation](https://www.aujas.com/grc-technology-automation-service) - [Third Party Risk Management](https://www.aujas.com/third-party-risk-management-old) - [Privacy and Data Protection](https://www.aujas.com/data-privacy-data-protection-services) ## [Security Verification](https://www.aujas.com/security-verification-services) - [Threat Simulation](https://www.aujas.com/threat-simulations) - [loT Security](https://www.aujas.com/internet-of-things-security-assessment) - [Penetration Testing](https://www.aujas.com/crest-certified-penetration-testing-services) ## [Security Engineering](https://www.aujas.com/security-engineering-services) - [Secure Development](https://www.aujas.com/secure-software-development) - [Ecosystem Engineering](https://www.aujas.com/ecosystem-engineering) - [CodeSign Platform](https://codesign.aujas.com/) - [Custom Security Development](https://www.aujas.com/custom-security-solution-development) ## [Managed Threat Detection and Response](https://www.aujas.com/managed-threat-detection-and-response-services) - [Threat Management](https://www.aujas.com/threat-management) - [SIEM & Security Monitoring](https://www.aujas.com/siem-security-monitoring) - [Automated & Continous Attack Simulation](https://www.aujas.com/automated-continuous-attack-simulation) - [SecOps Orchestration](https://www.aujas.com/security-orchestration-automation-and-response) - [Google SecOps](https://www.aujas.com/googlesecops) ## Company - [About us](https://www.aujas.com/about-us) - [Careers](https://www.aujas.com/cybersecurity-careers) - [Contact us](https://www.aujas.com/contact-us) ## Resources - [Blog](https://blog.aujas.com) - [Collaterals](https://www.aujas.com/collaterals) - [Case Study](https://www.aujas.com/case-study) Copyrights © 2025 All Rights Reserved by Aujas. - [Terms of Use](https://www.aujas.com/terms-of-service) - [Privacy Policy](https://www.aujas.com/privacy-policy) - [Cookie Policy](https://www.aujas.com/cookie-policy) ![](https://px.ads.linkedin.com/collect/?pid=656027&fmt=gif) ![websights](https://ws.zoominfo.com/pixel/62839c658f43f50012ae3b9a)