Simplify Operations and Compliance in the Cloud by Protecting Sensitive Data

Table of Contents

• Introduction
• Analysis
  • Simplify Audits When Using Cloud Services by Implementing Encryption or Tokenization to Control Access to Sensitive Data
  • Develop a Data Security Governance Strategy to Address Data Residency and Compliance Issues by Applying Encryption or Tokenization and Access Controls
  • Avoid Data Breach Notification Requirements for PII and ePHI by Protecting Data Stored in the Cloud
  • Don't Rely on the Service Provider to Delete All Copies of Data in the Cloud
  • Understand That Protecting Sensitive Data in Cloud-Based SaaS Applications May Require Trading Off Security and Functionality
  • Assess Each Encryption Solution by Following the Data to Understand When Data Appears in Clear Text, Where Keys Are Made Available and Stored, and Who Has Access to the Keys
• Gartner Recommended Reading