How to adopt a data-centric approach to data security
April 2023
IT in Manufacturing
By Gary Allemann, MD at Master Data Management.
Gary Allemann.
There is no doubt that data protection regulations, like the Protection of Personal Information Act (PoPIA), are driving investment in data security. Typically, investments have included beefing up firewalls and other barriers to external threats; locking down the ability to extract data via devices such as memory sticks, and ensuring encryption of databases and hard drives. However, while these broad measures are important, they do not provide the level of protection required. This is because data privacy is context sensitive.
Sometimes, specific data is private, and in other contexts, it is not. That means that, to comply with PoPIA, a data-centric approach to data security must be applied that takes into account the purpose for which data is being used, and who is accessing it. So how do we adopt a data-centric approach to data security?
Data access must be restricted by purpose
In general, data privacy regulations such as PoPIA limit processing and access to data based on purpose. In short, data may only be accessed as required for a specific purpose. Blanket, all-or-nothing approaches such as encryption do not limit access based on specific roles. All users are either locked out, or have full access.
The General Data Protection Regulation (GDPR) requirement for a process register can be a great place to start. By linking business processes to roles, systems, and data, we can identify which roles require access to which data sets, and even to which attributes or rows of data. Using a data stewardship platform that makes it easy to identify and trace these relationships can speed up the process and make it easier to track.
Data classification processes need to consider purpose too. Generic classifications, such as PII or Restricted have limited value as they do not provide sufficient context for purpose-based security. Classification systems need to be more precise – for example, identifying telephone numbers, email addresses, names, and ID numbers. This allows data access policies to combine roles with the data that are required to support specific tasks.
Row and attribute
Fine-Grained Access Control (FGAC) combines roles with access to specific attributes. This is not enough. FGAC must also enable row-based filters. For example, data associated with children is treated as special data under PoPIA. A row-based policy could make all data for customers under 18 years old inaccessible, or we could restrict access to data based on location, or any other criteria. FGAC extends role-based access control to make access data-centric.
Future proof
As organisations increasingly embrace hybrid cloud, so the complexities of enforcing policies increase. It is very difficult to enforce policies if different technical implementations are required for each dataset, or each cloud provider. A single, centralised platform to manage data access policies on-premise and across various cloud platforms makes this easy, and protects against future changes in cloud provider.
Further reading:
Even in autonomous systems, human insight is important
Schneider Electric South Africa
IT in Manufacturing
As AI, IIoT and digital twins reshape industrial operations, Schneider Electric’s Kobus Vermeulen and Bafana Msibi argue that the operator’s role is shifting from controlling equipment to interpreting intelligence, validating AI recommendations and making decisions that improve
Read more...
AI-based quality inspection scales across P&G operations
Siemens South Africa
IT in Manufacturing
Siemens and Procter & Gamble are expanding an AI-based visual inspection system across P&G’s manufacturing operations worldwide, inspecting products in real time at full line speed, and reducing scrap rates by 10 to 20% depending on the product.
Read more...
How sustainability unlocks real business impact
Rockwell Automation
IT in Manufacturing
Sustainability has moved from a compliance obligation to a strategic driver of resilience and value for manufacturers. Rockwell Automation explains how its Triple A framework and connected-data approach help producers cut energy, water and waste while improving productivity.
Read more...
Mining’s AI future will depend on people as well as technology
IT in Manufacturing
South Africa’s mining industry is embracing digitalisation and AI, but AvenirHoldings chief executive officer, Tshidi Mndzebele says the real test is whether the people behind the industry are equipped to move forward with it, and outlines five things mining needs to get right.
Read more...
How BIC overcame operational silos to integrate technology and people
Rockwell Automation
IT in Manufacturing
Manufacturing giant BIC deployed Plex MES from Rockwell Automation at its Bizerte plant in Tunisia, replacing fragmented, partly in-house software with a single cloud-based execution system that broke operational silos and improved shop-floor visibility.
Read more...
AI in industry is an early warning system, not a guarantee
Schneider Electric South Africa
IT in Manufacturing
Schneider Electric’s Paul Steyn argues that AI in industrial maintenance is only as good as the infrastructure and people behind it, and explains the three layers a facility needs before predictive maintenance can deliver on its promise.
Read more...
SA’s mining industry must put people at the heart of its digital future
IT in Manufacturing
South Africa’s mining industry employs around 470 000 people while its digital transition accelerates. Avenir’s chief executive officer, Tshidi Mndzebele argues that technology should enable and upskill the workforce rather than replace it, setting out five ways mining can make technology work for its people.
Read more...
Quality control supports efficient tissue production
Valmet South Africa
IT in Manufacturing
Valmet’s advanced quality control technology is helping tissue producers improve product consistency while reducing energy and raw material consumption. Its latest installation at KORO Paper in Vietnam combines real-time measurement, process optimisation and non-contact, nuclear-free quality control.
Read more...
Patented algorithm maximises operator efficiency
Rockwell Automation
IT in Manufacturing
Rockwell Automation piloted a patented anomaly detection algorithm and FactoryTalk DataMosaix at its Twinsburg electronics plant, giving operators 30 to 60 days’ advance warning of stencil failure, improving fail rates by 22% and achieving a 200% return on investment.
Read more...
Cybersecurity must become part of the next era of industrial automation
Adroit Technologies
IT in Manufacturing
The EU’s Cyber Resilience Act is setting a global benchmark for connected products, making cybersecurity a core engineering requirement in industrial automation. Adroit Technologies and Mitsubishi Electric explain how building security into controllers, PLCs and drives from the outset helps South African manufacturers protect production and meet international expectations.
Read more...
printer friendly version