What does a conscious responsable company look like?
of authentic
Just because you choose words that sound nice or important doesn’t mean your company will magically exemplify those values.
Core values don’t just help guide your employees’ actions; they inspire a deeper understanding of how your company plans to evolve in the future. Identifying its true core values takes hard work, but the extra effort is definitely worth it.
Authentic values demonstrated by trustworthy leaders are also proven to provide companies with viable competitive advantages. As leader, you play a major role in helping to ensure that these values are thoughtful, and are clearly communicated and exemplified from top to bottom.
your true values
Identify our company’s core values was a group effort. We sat down as a team on many ocassions to discuss how we wanted to grow in the future. We looked to create values that would contribute to that specific mission. After much thought, the following became our six core values that we continue to live by, even 10 years later:
- Make it happen
- Reputation over revenue
- Employees first, always
- Commitment to safety
- Work as a team, win as a team
- Never give up
Don’t rush the process. Core values take time to develop and construct. If you want your organization to truly stand for something worthwhile, take the time to identify which values apply to you, your company and your specific goals.
The six values our company eventually finalized are so ingrained in our culture that it’s hard to go a day without witnessing our well-known phrases in action. They’ve become an integral part of who we are.
to Sensitive Data Management
Bring in personally identifiable information requires far less effort due to insufficient security controls and the mass amounts of information exposed by company every day. The problem is exacerbated by employees with too much access and those who accidentally share mismanaged data.The consequences of not employing effective sensitive data management strategies are quite severe, as many breached company have learned. It can take many years to undo the damaging impact of data breaches that are exacerbated by improper sensitive data management controls, if they can be remedied at all.
While compliance helps drive business need, it is clearly not enough as evidenced, a holistic approach to risk that includes data discovery, data classification and data protection is the most effective in preventing critical information from getting into the wrong hands.
Most company on high end industry must stop working under the assumption of “if,” and instead, build strategies around “when” a data breach will occur. The bad guys are only getting better at what they do, and are often ahead of the security process. When companies rely too heavily on securing the perimeter instead of managing the items within the perimeter, they’re setting themselves up for a more damaging breach.
A strong defense is important and necessary, but consider this analogy. If the world thinks you keep a pile of cash in your mansion, someone will try breaking in to steal it, even if the security is established. If they knew it was secured in a safe on invested or didn’t know it existed, they likely would not bother breaking in.
Our Sensitive data management is a strategy that incorporates people, process and technology focused on data discovery, classification, security governance and protection.
Our vision of Sensitive data management can include the usage of data loss prevention technology, but as a whole it is a comprehensive strategy to know where your data is, what is at risk, who has access, when it is touched and how to protect it.
Our company incorporate these steps into their sensitive data management best practices:
- Defining what the company deems as sensitive information;
- Knowing where sensitive data is and who has access;
- Classifying data in terms of importance and potential harm to your company, if theft;
- Identifying who the data owner is;
- Governing the accountability of data owners;
- Determining if data is necessary or obsolete and if it poses;
- Unnecessary risk;
- Eliminating data as soon it is no longer necessary or protecting it if it must exist.
