Security managers need to know what we have, where it is, what risk it has, and who is doing what to it.
It’s not always possible to harden every system to a high level, or turn on logging on every drive. Knowing what information is inherently risky, and where it is, means we can focus our efforts on that data and those systems. We may find information that needs to be moved or deleted, or systems that should be better secured. As well as these preventative controls, we need detective controls, to identify any breaches that happen so we can respond.
Castlepoint is your comprehensive information security solution. It helps you comply with the Cyber Security Principles: