Security News > 2023 > March > Navigating data classification in the era of extensive cloud adoption

Cloud adoption has had significant effects on data classification, minimization, and end-of-life data disposal.

Just 55% of organizations can boast a mature data classification model that determines when data has reached EOL-meaning that nearly half fall short when it comes to determining when to dispose of cloud-stored data.

"Covid changed working norms for all industries, and adopting cloud helped adapt to those changes. But hackers also changed their approach. The industry reported that 45% of breaches that occurred in 2022 were cloud based. Yet our research found multiple instances of insufficient practices for managing EOL data in the cloud," Mellon continued.

The study found that 57% of organizations have a data schedule where they review different data types to determine whether data has reached end of life.

In addition to falling short when it comes to data classification and minimization, a worrying 59% of respondents reported using processes without verified data destruction at least some of the time to deal with at least some of their EOL data.

While it is standard for cloud providers to refer to data deletion or destruction processes within user agreements, the practice of receiving clear assurances that specific sensitive data has been removed for good is still in its infancy, leaving highly regulated industries vulnerable to both regulatory noncompliance and unauthorized data access threats.

News URL

https://www.helpnetsecurity.com/2023/03/09/cloud-data-classification/