Efficacy in sensitive data protection It involves monitoring the access and use that is given to the systems, but also the policy that has been implemented to achieve it.
This monitoring makes it possible to know if this policy is really working or if, Conversely, it is necessary to adapt it to new circumstances. To do this, it is necessary to find out if the software or system level solution that are being used are really useful.
How to achieve continuous control over the system
See everything information in this way makes it possible to carry a continuous control that makes it possible to react in time when it is observed that an item is evolving in a direction that is not the correct one. For this it is necessary:
- Record and archive all activity: what accesses have been enabled and to whom, what data do they correspond to?, etc.
- Monitor and review policies that have been implemented: make a continuous control compliance, functionality and periodic adaptation.
