Technical Panel: Data-Centric Security – A New Approach to Protecting, Sharing and Controlling NATO Data Assets
Thursday, November 14, 2019: 9:30 AM - 11:30 AM
Speaker(s)
Description
Approved for 2 CompTIA CEUs: A+, Network+, Security+, Cloud+, CySA+, CASP+, PenTest+; 2 CertNexus CFR CECs and 2 GIAC CPEs
Recently, the Allied Command Transformation (ACT) has proposed a Vision and Strategy for adoption of a Data Centric Security (DCS) approach within the Alliance Federation. Data Centric Security has three main tenets where data is the key focus: Control, Protect and Share. As the Alliance Federation transitions to new CIS paradigms and faces increasingly changeable and dynamic operational conditions, understanding where data is located, how it flows, controlling its usage, identifying what risks it is exposed to and who is permitted to access it requires a comprehensive data centric approach. This includes the evolutionary enhancement of defence-in-depth and information sharing by focusing on the data itself through the development of a DCS approach. The DCS Vision and Strategy provides a framework for the development of capabilities related to data centric activities within the Alliance Federation. Acknowledging data - and information conveyed by this data - as a critical resource, DCS represents a comprehensive approach that will enhance our vital capability to control and protect NATO information and share it with trusted partners across the multiple security domains of the Alliance Federation. DCS will enhance the principal benefits of operational agility and security. A DCS approach facilitates at its core, the labelling of our data with trusted metadata, access management, automation for sharing information cross-domain and, latterly, cryptographic object level protection to deliver enhanced post-release control and data leak protection. These benefits will be felt both in the office environment and during Alliance operations. The panel will discuss the DCS Vision and Strategy, and feasibility, risks and benefits of DCS for implementation in the NATO Enterprise and the Alliance Federation and how this evolution may be achieved.
Tracks:
Sponsored by:
Approved for 2 CompTIA CEUs: A+, Network+, Security+, Cloud+, CySA+, CASP+, PenTest+; 2 CertNexus CFR CECs and 2 GIAC CPEs