Torsion Information Security Blog

Exploring the business and technical implications of information security.

Trust your people to control access

Forbes has published some latest research that identified five key trends that set data-leading organisations apart from peers. One of those key trends is ‘Trust’, in particular valuing trust and accountability in governance decisions.

This is the key premise that Torsion has based its entire business model on. Only the data owners within an organisation know which colleagues should have access to the file, folder or site they created. However, in order to harness this knowledge, the role of data access needs to shift away from the IT team to the business users themselves. In other words you need to trust and empower your people for more effective data access governance.

Forbes reported: “Becoming data-driven relies on recognition that your people are not just capable of making decisions, but they make the best decisions when equipped with timely, relevant data. There are a lot of reasons to be cautious with data, with regulation and privacy laws leading the list. But often we design our data strategy and governance out of an abundance of fearing nefarious intent, which leads some organizations to lock down data access to a few. Interestingly, the research showed that developing values of trust and accountability within organizations pre-dated the maturation of being data-driven. Having both trust from leadership and transparent access to governed, accurate data, results in greater employee responsibility and accountability for the information used and needed.”

Of course, business users don’t have the time or inclination to spend any significant time managing data access. They have other jobs to do. But by giving them the right automation tools and trusting in their decisions, they can easily ensure they are in control of their own data access.

Torsion supports teams by monitoring day to day access in the background and only when it finds something that doesn’t look quite right, it sends a quick notification to the data owner to confirm what action needs to be taken. The result is a win-win situation. Business owners are empowered with the responsibility to control their own data and organisations benefit from the knowledge of those, and only those, that know who should have access to what information.

I want to know more
close slider

    Sounds interesting, send me a bit more info...