Chirag Goswami Outlines Essential Practices for Sensitive Data Protection

In a recent LinkedIn post, Chirag Goswami discusses critical practices businesses must adopt to safeguard sensitive data, emphasizing that robust protection is not merely a compliance issue but a fundamental business asset.

Goswami highlights that common data breaches often stem from less sophisticated failures rather than advanced cyberattacks. He states:

“Most data breaches don’t happen because of advanced hacks — they happen due to poor access control, weak encryption, or forgotten data.”

Understanding Sensitive Data and Its Value

Chirag Goswami begins by defining sensitive data as one of a business’s most valuable yet vulnerable assets. He categorizes sensitive data types to underscore their breadth and importance, including Personally Identifiable Information (PII), health data, intellectual property, financial information, educational and employment records, and legal documents.

As Goswami points out, understanding these data types is the first step in effective protection. He elaborates on the necessity of comprehensive data management strategies:

Core Practices for Data Security

The core of Goswami’s post details several essential data protection practices:

• HTTPS Encryption: Essential for securing data transmitted over networks, such as names, addresses, and login credentials.
• Key Management: Emphasizes the secure storage and management of encryption keys, recommending the use of vaults and role-based access.
• Salt and Hash Passwords: A crucial step to defend against brute-force and rainbow-table attacks by adding a ‘salt’ before hashing passwords.
• Data Desensitization: Recommends masking or encrypting highly sensitive fields like Social Security numbers and medical data using strong encryption methods.
• Minimal Data Permissions: Advocates for role-based access control (RBAC) to ensure users only access the data necessary for their roles.
• Data Lifecycle Management: Stresses the importance of tracking sensitive data from its creation through testing, deployment, and eventual disposal.

According to Goswami, implementing these practices is key to reducing risk and maintaining compliance. He notes:

“Track sensitive data from creation to testing, deployment, and final delivery.”

The ‘Why’ Behind Data Protection

Chirag Goswami strongly argues that the motivation for stringent data protection extends beyond regulatory requirements. He frames it as a matter of business resilience and trust. As he explains:

“Sensitive data is one of your most valuable assets — and one of the most targeted.”

He concludes by mentioning Cybernara’s role in assisting businesses with these challenges, offering practical solutions for encryption, access controls, and lifecycle governance that aim to enhance security without hindering team productivity. Goswami invites further discussion for businesses seeking assistance with data security.