The practice of protecting company data by setting up network security measures has often been proven ineffective in the light of security breaches and company data leaks. The lessons of the Société Générale’s Jerome Kerviel early this year suggests that aside from preventing outsiders from accessing sensitive data or promoting security best practices, companies should also protect individual chunks of information that move through various nodes of the enterprise.That DRM has been the bane of illegal distribution of copyrighted works, such as movies, music and e-books suggests that it could just be one of the best approaches in protecting sensitive trade information. In a keynote address last month, Symantec’s Chief Executive, John Thompson, explained that “information centric security…is about securing the most critical information, from source code to customer records to employee data.” This approach focuses on the level of risk assigned to each chunk of information and giving it the necessary measure through metadata that identify where these information can be used or who can access them.
More...