What LEGO® Can Teach Us About Data Security


LEGO is slippery. I know that statement doesn’t sound like it makes sense and you are probably saying to yourself: “Surely he knows that LEGO blocks interlock and stick together!”

That is true. But, if you have ever used LEGO to build on a hard surface you know that, as you add more bricks to the building you are making, your construction can easily slip around. Unless you are building on a LEGO surface, you can’t always be sure the pieces you are adding won’t cause the structure to slip or tip. The foundation that you build upon makes all the difference to the stability of what you are building.

The same holds true for your data protection strategies. Over the years, we have added technology “blocks” to help us protect data: VPN, anti-virus, encryption, data loss prevention (DLP), mobile device management (MDM), and – most recently – cloud access security brokers (CASB). Each of these security “blocks” has helped us build an impressive data security tower, but it unfortunately still has a tendency to fall over. Like a LEGO tower without the LEGO surface, too many organizations are building their data security tower without the proper foundation.

What, then, is the foundation of data security? Classification.

The arrival of cloud data storage services such as Box, Dropbox, OneDrive, and SharePoint Online has brought the need for classification into sharp focus. While knowing the value of what you have, where it is, and who has access is crucial for any data security policy, it is especially important before we let users share files or migrate document libraries to the cloud. While the cloud itself is secure, how we use it and what we put there creates the risk. According to Gartner, by 2020 95% of all cloud security failures will be the fault of the users, not the providers.

TITUS helps organizations identify, classify, protect, and analyze their unstructured data. At RSA, TITUS will be announcing new capabilities to enhance and simplify data identification. Stay tuned to this blog for more details, or visit our booth (1215) at RSA San Francisco from February 29 – March 4.

Leave a Reply