3 ms·
This is the path to enlightenment. The best way to protect PII is to ruthlessly minimize it in your system. Better for compliance and better for customer secur
by ptmcc 3y ago
This is the path to enlightenment. The best way to protect PII is to ruthlessly minimize it in your system.
Better for compliance and better for customer security. And get to avoid whole sections of scrutiny and review when infosec comes knocking.
- happytiger 3y agoAs someone who’s dealt with vast troves of PII, you clearly speak from deep experience.
- jjav 3y ago> The best way to protect PII is to ruthlessly minimize it in your system. Absolutely, been trying to preach this for ~10 years now at various companies. Another argument to make is that I can guarantee 100% certainty against leaks with a budget of $0, for all the data columns that I never had. Such a deal! Any other choice is going to cost a lot more and have reduced chance of success. Sure, we need to handle some sensitive data to run the business but choose selectively, since every one just adds both cost and risk.