McKinstry

May 25^th is a big day in the business world, a day which many organizations have spent years preparing for. On this day, the European Union will begin enforcing the General Data Protection Regulation (GDPR).

GDPR seeks to create a harmonized legal framework for Data and Privacy and in effect puts citizens back in control of their data. In light of increasing angst about “data dominance” by a decreasing number of companies and with the recent revelations and “mea culpa’ from Facebook, there has never been a stronger focus on the intersection between Data and Privacy.

As with all such regulations, the tendrils reach much further than what meets the untrained eye. Not only are there strict rules about Data usage, but also on hosting and processing. Furthermore, citizens have the “Right” to be permanently “forgotten.” Companies that decide to flout or ignore this regulation do so at enormous financial risk, not to mention PR risk. To be clear, paying simple lip-service to GDPR doesn’t suffice: companies must furnish proof that they are indeed complying and have reduced the citizens’ exposure to breaches.

Now What?

There are countless places on the Web to learn about the intricacies of GDPR, but that is not the main point of this blog; instead, here we aim to provoke a discussion by asking a very basic question: “GDPR is here, so now what?”

First in the list of “Now What’s?” is the fact on which most experts agree: Most organizations are woefully underprepared for GDPR. From well-meaning not-quite-ready companies to those that openly disregard and challenge regulation and government authorities, most organizations are unprepared for the stringent requirements nor for the consequences associated with the regulation. There is still a chance to right the ship, and because of this lack of preparedness there will be enormous opportunity in conflict resolution, litigation, and customer-connection/satisfaction.

global data privacy

That said, the real “Now What” is a completely different beast in our opinion. We believe that the pendulum will swing back strongly, in a shift from Corporate self-governance to a Regulation-based world. Increasingly, governments and citizens are fatigued by breaches of privacy and security. Increasingly, governments and citizens believe they have ceded power to a few large technology corporations. Books, academic articles, blogs, and screeds abound on this “abuse” of power. Whatever a person’s politics, there is no doubt a shared concern over the propriety and integrity of the relationship between large Data players and citizens.

A New Paradigm

What this means is that Regulation will creep back in, in more spheres of business. With this trend, organizations must engage experts both internally and externally on an ongoing and sustained basis to understand, anticipate, and manage the Regulatory frameworks that will emerge.

For some, these issues are cast in a political light. For others, it’s strictly business. Some perceive issues of Data Protection as moral and ethical, while others see them as simply practical. Wherever individuals or organizations stand on GDPR and other regulations, one thing is for certain: All organizations need to prepare for a new paradigm with more vigor than they ever before.

Constantine Korovkin is the COO and Co-Founder of Akvelon. He is passionate about excellence in execution, building successful high-tech businesses, project management, exceeding clients and customers expectations in every way.

More Insights

Cloud Security: Don’t Wait Until It’s Too Late

In a digitized world, security is an inherent part of the company’s infrastructure. Akvelon Co-Founder and COO, Constantine Korovkin, explains.

Cloud Security in the Medical and Health Fields: Focusing on What Matters

For the Medical and Health industry, Cloud security is about focusing on what matters for each individual organization. There is not a single formula when planning for security, making the planning process that much more important yet difficult.

Security and Businesses Are Fundamentally Intertwined

It’s important as a business to think of security in a dynamic and holistic way. Akvelon Co-Founder and COO, Constantine Korovkin explains.

Put simply: Security breaches are a fact of life and Security thus inheres in everything a business does.

Like Siamese twins, business and security are bound together inextricably- the choice before us is to determine whether they are amicable or constantly at loggerheads. It is high-time that every leader of every organization understand this and act on it. Living breach to breach is tantamount to sitting idle while waiting for what some senior experts refer to as “extinction level” events.

Interestingly, however, once this realization is made, Security can be thought of as any other core business issue. A plan is necessary as is a dynamic framework that fundamentally presupposes that attack vectors will change constantly, that the sophistication of the “bad guys” will continue to increase, and that the surface area of attack will grow as organizations grow and transform digitally. This framework must be holistic insofar as it must solve for Technology, People, and Process. The framework must “live” and evolve. Stasis is death. If there are “Moving threats” then you need “Moving Threat Defense,” as cybersecurity pundits will tell you.

As with all such fundamental issues in an organization, great internal resolve is needed to embark on the journey. Knowledge of the intricacies is of course necessary but most organizations have only very rudimentary controls in place, indicating that once the resolution is made to take Security Maturity seriously, quick work must be done to assess where the organization is, and where it needs to get, with time being of the essence. Attacks are increasingly frequent and increasing costly and come from both outside and inside the organization.

In this, technology is important but neutral. As security (defense) technologies get more innovative and powerful so do the attackers’ methods. Put in a slightly different language, it’s important that organizations invest in the latest and greatest software to protect themselves and allow for their businesses to run smoothly, but they also need to invest in ongoing services and processes that allow them to stay a “step ahead.”

All large transformations offer great opportunity and create new costs. Digital transformation is no different. The enormous benefits that come from digital business are well-documented and well-understood. The costs associated with it have to be not only understood but accepted.