Page 6 - Dash (June 30, 2021)

Rakshans' Training:
All About Data Graveyards
In this era of Technology where our personal
information has become part of a 'utility
service', we disclose our data to perform and
complete day-to-day activities (e.g., online banking
transactions, online shopping, delivery services, call logs in our
phones, etc.).One of the most common ways we do this nowadays
is the mandatory disclosure of our health status through the
Contact Tracing Apps or platforms as a measure to stop the
T
spread of COVID-19. h e precious pieces of information we
disclose to third parties and government organizations become
unused for a certain period. Eventually, they will be classified
as "Data Graveyards".
Understanding Data Graveyards and the importance of minimizing
them were the focus of the exclusive monthly training session
under the Raksha program on June 15. Conducted by Compliance
Manager AA Pirante, the lecture delved into the different types of
data graveyards, their impact to costs, and how reducing them
can result to lower costs but also decrease information security
and data privacy risks.
Key Takeaways:
• A Data Graveyard is any location, or any platform where
unused data is stored and kept by data processors and
data controllers, such as hard-drives, thumb drives, data
centers, and filing cabinets, etc.
• Advantages of having Data Graveyards include:
.,.
* If collected and used based on their purpose, data stored
.;. ..• can serve as a pool of information for marketing and
•
•
research; and, provide statistics, trends, and forecasts for
business targets.
. AKSH- * It can serve as a repository of knowledge and actions
taken for process improvement and personal and/or
organizational achievements.
• Risks and Challenges
* Expensive storage subscription and investment, including
high maintenance cost in maintaining a Data Center,
infrastructure upgrades, network security patches and
subscriptions, preventive maintenance, annual independent
certifications, and space allocation which may be used
for other purposes.
* Risk in compliance with the Privacy Legislations on where
the data or information are stored, challenges in complying
with the Information Security Controls and industry standards
such as ISO 27001 :2013 and PCI-DSS, and high risk of data
corruption, breaches, phishing, and malware attacks,
unauthorized access, etc.
According to Aaron, being well-versed on the basic Data Privacy
Principles can help minimize risks and challenges in maintaining
a data graveyard. Maintaining a big database may pose different
challenges and risks depending on the nature of the data that we
collect, process, and manage. "It is important to always keep in
mind that the more data that we collect and store, the more
responsible we should be," he said.
Interested to join the exclusive training sessions under the
Raksha program? Contact your HR BP.