Business Videos

Data Security for the Digital Business | Chris Porter | CIO Talk Network

The CIO Talk Network interview with Chris Porter focuses on the evolving landscape of data security in today’s digital business. As organizations migrate data to cloud services, mobile devices, and SaaS platforms, the traditional perimeter has dissolved, leaving data scattered across countless environments. Porter emphasizes that effective protection now requires comprehensive governance to locate and classify every data asset. Porter outlines a practical framework derived from PCI standards—secure storage, processing, and transmission—highlighting encryption at rest, in memory, and in transit as baseline controls. He stresses that merely treating security as a technology issue stalls investment; instead, he advocates quantifying cyber risk in monetary terms using the FAIR model, which translates potential breaches into concrete financial losses that resonate with business leaders. Illustrative examples include calculating breach costs for 50 million records at $20 per record, yielding a $30‑$100 million exposure, and deploying web proxies to block risky sites while monitoring attempts. Porter also notes the importance of a crown‑jewel approach—identifying critical data such as personal information or intellectual property—and tailoring defenses, from availability‑focused resilience to IP‑theft detection. He highlights the rise of proactive hunt teams that seek compromises before they materialize. The discussion underscores that data security must become a cultural priority, aligning data owners with protection teams, embedding security into end‑to‑end business processes, and adapting risk appetite to industry context. Organizations that adopt risk‑quantified, data‑aware strategies will better safeguard their digital assets and sustain competitive advantage.