Conclusion
Security of information systems - Experience feedback

Computer uses coordinate our professional and personal activities, and it would be illusory to try to secure them with static solutions. We need to define native protection for assets, and ensure that usage does not generate additional risks or call into question the asset's native security.

If a piece of data is confidential, you need to ensure that any extraction, distribution, storage or other processing does not pose a new threat to the original data.

For each type of sensitive data, the security policy must define the requirements for data at rest, and the permissions for data in motion. For Cloud Computing, data security must be explicitly included in the service contract between the service provider and the data owners.

The proliferation of unstructured IT data, and the loss of control over it, are serious...