Data Risk Management Framework: Strategic Approach for Effective Risk Management
E N D
Presentation Transcript
Data Risk Management Framework • Agenda Objectives Overview Practical Examples Q & A Artifact Review
Data Risk Management Framework • Introduction • The Data Risk Management Framework (DRMF) is a an open-source framework designed to provide organizations accurate line of sight into data risk management capabilities. • It is not a compliance framework. What • The DRMF uses a structured and strategic approach the maps efficiencies across governance, operational and technical initiatives. • The framework deconstructs data risk management into logical control areas and supporting sub-controls. How • This offering fulfills an underserved need for organizations. • Organizations are failing to holistically address data security needs. • Data is the currency of modern business. Why
Data Risk Management Framework • Framework Overview Governance Providing the Ground Rules Protection Execution of Governance Requirements Data Risk ManagementFramework Visibility Informed Decision Making
DRMF – Key Drivers Industry Drivers Benefits • Current approaches to managing data risk aren’t working – they’re siloed, industry-specific, and not comprehensive. • Organizations are focusing on compliance, and they don’t know how to achieve true data risk resilience. • Organizations spend most of their time and resources on infrastructure and threat protection, not data security. • The DRMF can help organizations prioritize efforts and maximize the value of their existing portfolio of security solutions (as well as guide procurement for new tools). • Strategic approach versus fire fighting and tool buying. • Root cause analysis of organizational gaps. • A logical method for aligning security programs with organizational guidance. • Intelligent use of resources. • Outputs that are understood by business and security leadership.
