Data governance: going beyond compliance

Abstract

Information security, in its broadest sense, is often an afterthought in an organisation's IT planning and spending and rarely gets the high-level attention it needs and deserves. The problem is worse when you look at the specific aspects of data security that fall under the umbrella of governance risk and compliance (GRC). In this interview, Danielle Jackson, chief information security officer at SecureAuth, thinks that's changing. But is the change heading in the right direction or is the responsibility simply being shifted? Information security is often an afterthought in an organisation's IT planning and spending and rarely gets the high-level attention it needs and deserves. The problem is worse when you look at the specific aspects of data security that fall under the umbrella of governance risk and compliance (GRC). In this interview, Danielle Jackson of SecureAuth explains how she thinks that situation is changing. But is the change heading in the right direction or is the responsibility simply being shifted?