What are the most important data encryption principles for data governance? (2024)

Key takeaways from this article

• Key management:

  Central to data governance is the secure management of encryption keys. Ensure they are generated randomly, stored securely away from the data, and rotated frequently to minimize risks of compromise.

• Hardware-based encryption:

  For efficiency, utilize hardware solutions for encryption tasks. This offloads the workload from your main server, allowing for seamless encryption with minimal impact on system performance.

This summary is powered by AI and these experts

• Yuvaraj Birari Top Voice Data Architect and Top Voice…
• William Bostic NASM-CPT, Retired IBMer

• • Report contribution
  Data Encryption picked up post Cloud. Earlier Data was moving within Organizational on-premise infrastructure, rarely it would go outside. These rare occasion, Secure Transfer protocol was used frequently and encryption was optional. Now, Cloud infrastructure forced every data-interaction outside of Organizational physical boundaries. This nature of data interaction pattern mandates Encryption a must to have. The types, Symmetric and Asymmetric are dependent on nature of data interaction i.e. System-System and User-System, volume, speed, frequency, performance expectations etc. In my experience, the usage is mixed, between both Symmetric and Asymmetric types, for a given project or use case, depending on scenario.

  Like

  2

• Lindsay Pettai, CKM, A-CSM, CSPO 🏅 2x Top LinkedIn Voice | Data 📊 Governance Manager | Program Management | Project Management | Change Management PROSCI | Data Governance Leader | Senior Data Governance Manager | Data Governance Program Leader 📉

  • Report contribution
  In practice, many organizations use a combination of both symmetric and asymmetric encryption to strike a balance between speed, security, and scalability. For example, symmetric encryption might be used to secure the contents of a confidential message, while asymmetric encryption ensures the secure exchange of the symmetric key.The key is to carefully assess your specific data security requirements and employ the appropriate encryption type or combination to meet those needs effectively. A layered approach to encryption can provide a robust defense against data breaches and unauthorized access, catering to various aspects of data governance and security.

  Like

• Lindsay Pettai, CKM, A-CSM, CSPO 🏅 2x Top LinkedIn Voice | Data 📊 Governance Manager | Program Management | Project Management | Change Management PROSCI | Data Governance Leader | Senior Data Governance Manager | Data Governance Program Leader 📉

  • Report contribution
  When you see "https://" in a website's URL, it signifies the use of SSL/TLS encryption, providing crucial online security and user trust.As data security and privacy have become paramount concerns in the digital age, SSL/TLS encryption is an example of a data encryption standard that has widespread implications for online security and user trust. It's used in a variety of online services, from e-commerce websites to online banking, and it plays a crucial role in safeguarding sensitive information during online interactions.

  See Also

  Preventing Data Breaches: The Special Power Of EncryptionPasswords, encryption, anti-malware and firewalls - Network security - OCR - GCSE Computer Science Revision - OCR - BBC BitesizeVulnerabilities, Threats, and Risks Explained | Office of Information SecurityData Encryption

  Like

• Lindsay Pettai, CKM, A-CSM, CSPO 🏅 2x Top LinkedIn Voice | Data 📊 Governance Manager | Program Management | Project Management | Change Management PROSCI | Data Governance Leader | Senior Data Governance Manager | Data Governance Program Leader 📉

  • Report contribution
  In the data and knowledge management landscape, safeguarding data encryption keys is non-negotiable. These keys are the guardians of data security, ensuring confidentiality and integrity. Managing them with precision, randomness, and regular rotation is a cornerstone of effective data governance. Moreover, robust protection through encryption key management tools and policies is vital. It's not just about keeping data safe; it's about ensuring data is accessible when needed and impenetrable when not. In today's data-driven world, strong encryption key management is at the heart of responsible data stewardship.

  Like
• Jessica Talisman 6x Top Voice, LinkedIn💡Building information systems for the benefit of all Taxonomy | Ontology | KG | InfoSci

  • Report contribution
  Utilizing UUIDs is a common encryption method used to locate and access data objects. UUIDs can also be used as part of an https or http structure to permalink an encrypted data object for secure access by users with access permissions.

  Like

• Lindsay Pettai, CKM, A-CSM, CSPO 🏅 2x Top LinkedIn Voice | Data 📊 Governance Manager | Program Management | Project Management | Change Management PROSCI | Data Governance Leader | Senior Data Governance Manager | Data Governance Program Leader 📉

  • Report contribution
  Outdated algorithms and poor practices can create vulnerabilities that threaten data security. Key compromise or loss, performance overhead, and compliance or compatibility issues are challenges we must navigate.To tackle these risks effectively, a proactive approach is essential. We must adhere to encryption best practices, employing robust and up-to-date encryption methods and tools. Continuous monitoring and auditing are indispensable for staying one step ahead of potential threats. In a data-driven world, staying vigilant in data encryption is the linchpin of sound data and knowledge management practices.

  Like

• Lindsay Pettai, CKM, A-CSM, CSPO 🏅 2x Top LinkedIn Voice | Data 📊 Governance Manager | Program Management | Project Management | Change Management PROSCI | Data Governance Leader | Senior Data Governance Manager | Data Governance Program Leader 📉

  • Report contribution

  See Also

  Common Encryption Challenges | Encryption Consulting
  I see data encryption as an invaluable tool that aligns seamlessly with our core objectives. The benefits it brings, from enhanced security and privacy to bolstering compliance and trust, are the bedrock of responsible data governance. Encryption safeguards our data, ensuring it remains confidential and untampered. It fosters trust and collaboration by enabling secure data sharing, underpinning our data-driven decision-making processes and sparking innovation. These advantages, when harnessed correctly, are the building blocks of a strong reputation with our customers and stakeholders, paving the way for a brighter data management and knowledge management future.

  Like
• Jessica Talisman 6x Top Voice, LinkedIn💡Building information systems for the benefit of all Taxonomy | Ontology | KG | InfoSci

  • Report contribution
  Data encryption can have a secondary value, to establish the existence of a defined entity or object as unique. The serialized encryption of data makes it easier to merge duplicates and map relationships between objects and entities represented in a data landsape.

  Like

• Stephen Solewin Corporate Solutions Architect at Infinidat

  (edited)

  • Report contribution
  Just a thought around encryption best practices, regarding host based encryption and data reduction in the storage. Make sure everyone is involved in decisions to use host based encryption. Encryption essentially is obscuring data and patterns in that data. Data reduction is essentially finding patterns and storing them more efficiently. If host based encryption is turned on, what used to be data that reduced at a good ratio becomes data that doesn't reduce at all! Make sure all the players are aware of these decisions so capacity planning can be done effectively.

  Like

  3

• William Bostic NASM-CPT, Retired IBMer

  • Report contribution
  My perspective is that encryption and compression go hand in hand. My view is that using server MIPS to accomplish encryption/compression is far more expensive than letting the storage solution handle it. Some storage solutions, like IBM FlashSystem, can do it for next to zero performance impact. Where it does make sense to do it on the server is mainly around managing main memory footprint, especially for in memory databases and AI corpus. In the best case, the encryption/compression is still handled with a hardware offload engine vs. burning CPU cycles.

  Like

  2

• Harry Yudenfriend IBM Fellow (retired)

  • Report contribution
  For IBM z and z/OS clients, host based compression and encryption is available for the vast majority of data accessed through IBM access methods and ISV products. FICON and FCP encryption of data in flight is available for 100% of the data flowing over fiber channel links for added protection of data against additional other exposures (i.e. insider attacks). Clients using zHyperLinks for 10x reduction in I/O latency for critical applications need to consider host bast encryption for also protecting data in flight (i.e. dB2 logs).

  Like

  2

• Stephen O'Brien

  (edited)

  • Report contribution
  When it comes to key management some storage vendors support local onboard key management. You need to consider if this is sufficient versus using a key management platform which carries additional cost and possible overhead as it needs to be managed. Local onboard may be less expensive and easier to manage but is it as effective.

  Like

  1

• • Report contribution
  Effective data encryption is pivotal for safeguarding sensitive information, ensuring that only authorized parties can access it. Adhering to a robust encryption standard, like AES, is crucial for maintaining data integrity and confidentiality. Implementing end-to-end encryption ensures data is protected during transmission and at rest. Regularly updating cryptographic keys and employing a key management system enhance security. Lastly, compliance with global data protection regulations, like GDPR and upcoming India's own DPR Bill, is imperative to ensure lawful data handling and build customer trust.

  Like

  1