Compliance risk is a business risk, and if overlooked can have costly consequences for your organization. The legislative requirement to identify and protect personal information, has made businesses aware of the importance of using, deleting, storing, and managing data governed by POPIA in a secure manner and to mitigate the risk of data loss incidents such as ransomware attacks and data breaches.
Can you identify what PII you have, in production, backup systems, on-premises and across clouds?
Can you prove that you can identify personal information?
Where is it stored? Should it be there?
Is it protected?
Who owns it and who has access to the data?
Should you retain it or defensibly delete it?
Are you able to identify redundant data so you can reduce infrastructure/storage costs?
Are you compliant with the Protection of Personal Information Act (POPIA)?