Defining the difference between compliance and protection

When ‘secure enough' isn't enough

Published September 2014

Many organizations in financial services, healthcare and other regulated industries implement data security policies because they are required to. Meeting compliance regulations is important, but even the strictest compliance requirements still can leave sensitive data vulnerable to malicious parties capable of breaking into encrypted USB storage devices and extracting confidential data from them.

Compliance alone may not offer the protection enterprises need to prevent data breaches that can cost millions of dollars, inflict untold damage to corporate brands and customer relationships, and invite weeks or months of negative publicity.