ABSTRACT

Since both data security and data privacy can extend to all aspects of data handling within business and IT, it falls to reason that data protection as a storage function also must consider security and privacy; overlooking those considerations in fact can cause significant challenges to a business. Although data protection systems are designed to reduce the risk exposure of a business, for security and privacy teams, if misused, they can represent a significant threat vector to the business. While privacy breaches often occur from poor security controls on the primary copy of the data in the first place, they have also been known to happen in relation to data protection, too. Multi-tenancy is useful even in single-business environments. Two groups within the company might compete for the same customers, or the business might operate in an environment where ethical or isolation walls are required, which could extend down to the data protection services.