Gartner发布2024年数据安全成熟度曲线：人工智能和量子计算驱动的32项数据安全相关技术发展变化全文_gartner数据安全资源-CSDN文库

需积分: 5 91 浏览量 2024-07-30 16:25:01 上传评论收藏 1.44MB PDF 举报

资源推荐

资源详情

资源评论

Gartner, Inc. | G00813639

Page 1 of 112

Hype Cycle for Data Security, 2024

29 July 2024 - ID G00813639 - 128 min read

By Analyst(s): Andrew Bales

Initiatives: Security of Applications and Data; Meet Daily Cybersecurity Needs

Security and risk management leaders are preparing for the

impacts of AI today and quantum computing in the future.

Synthetic data, postquantum cryptography and other innovations

on this Hype Cycle can help to mitigate data security and privacy

risks and accomplish business objectives.

This Hype Cycle covers many aspects of data security that security and risk management

(SRM) leaders must review in relation to their risk appetite and where data is stored,

processed and accessed. They include:

Data security governance, data risk and privacy: These categories help to establish

the strategic foundation for data security efforts, including assessing risk and

privacy impacts, which allow for appropriate correlation of technical controls to

downstream controls. See the entries for data security governance, data risk

assessment, ﬁnancial data risk assessment (FinDRA), privacy impact assessments,

data breach response, privacy by design and sovereign data strategies.

■

Data discovery, categorization and classification of structured and unstructured

data: These technologies support a foundational set of controls that every data

security program should be built on. For more information, refer to the entries for

data discovery, data classiﬁcation and metadata management solutions.

■

Data processing and analytics across endpoint, application or storage layers: Data

is dynamic, and data security vendors recognize that to keep up with the needs of

modern business, the controls must exist where the data is. For dynamic data

security controls that exist where the data exists, see the entries for endpoint access

isolation, DevOps test data management, and digital communications governance

and archiving.

■

This research note is restricted to the personal use of liuyang17@qianxin.com.

Gartner, Inc. | G00813639

Page 3 of 112

The Hype Cycle

Hype around data security governance has signiﬁcantly increased as it has traversed the

Peak of Inﬂated Expectations on the downward slope to the Trough of Disillusionment.

The principles of data security governance have become the primary method for

developing and applying consistent policies across data stores, in the cloud and on-

premises. These principles extend beyond just data security efforts, aligning also with

data quality, privacy and AI ethics.

The Priority Matrix

SRM leaders must look for technologies that integrate multiple security controls. The

simpliﬁed orchestration facilitated by these integrated controls, especially those with high

or transformational levels of beneﬁt to the business, will help to reduce operational

complexity and minimize the total cost of ownership.

The combination of business and security risk management will drive data security

investment decisions to facilitate desired business outcomes. This is accomplished using

the transformational and high-impact concepts of data security governance, data risk

assessment, FinDRA and privacy impact assessment.

SRM leaders that identify data security outcomes using these concepts will have a more

accurate understanding of the overall business needs and strategies. They will be better

prepared to select the best-suited consolidated platform of data security capabilities,

whether a data security posture management, data security platform, security service

edge or privacy management tool.

Furthermore, with the looming threat of weakened asymmetric cryptography methods

from quantum computing, SRM leaders should pay close attention to crypto-agility and

postquantum cryptography. That includes moving to quantum-safe algorithms, as the

urgency to update weak crypto will only increase as we get closer to the expected

widespread adoption of quantum computing at the turn of the decade.

Timing for adopting these innovations depends on many factors, including the

organization’s risk appetite and business objectives. Use the Priority Matrix to help

prioritize and strategize investment in data security innovations.

This research note is restricted to the personal use of liuyang17@qianxin.com.

剩余116页未读，继续阅读

内容反馈

lurenjia404

粉丝: 5455
资源: 176

最新资源

资源上传下载、课程学习等过程中有任何疑问或建议，欢迎提出宝贵意见哦~我们会及时处理！点击此处反馈

feedback-tip