How Should One Approach the Security of Structured and Unstructured Big Data?

In an interview with Wise TV, Pluxee CISO İlker Çağrı Güven shared significant insights on data management—one of the most fundamental aspects of data security. “The essence of the matter lies in understanding your data. From the very beginning, we must know what data we have, the conditions under which it is stored, and the circumstances under which it moves. In the IT context, we categorize data into two types: structured and unstructured. Structured data refers to information kept in databases, while unstructured data encompasses files found in office applications, email systems like Outlook, or shared network drives. Our approach to these two types of data differs significantly. Managing and securing data in databases involves different technologies compared to the strategies we employ for unstructured data in active use. We need to bring risk assessments for both structured and unstructured data onto a common ground—identifying where the data is stored, who it is shared with, and how it moves—so that we can conduct accurate risk analyses and implement appropriate safeguards. For structured data, it is essential that information is stored in databases in an encrypted format, accessible only to the relevant applications and authorized personnel, ensuring that no other stakeholders can gain access. For unstructured data, all states—whether the data is at rest or in transit—must be monitorable via Data Loss Prevention (DLP) software. After all, you cannot control data that you cannot see, monitor, or track. Even if an organization has DLP software in place…” Even when DLP (Data Loss Prevention) software is installed, it often fails to function effectively if it is positioned in a way that prevents it from tracking the movement of the relevant data. Therefore, organizations must first identify the data they possess, determine the conditions under which this data is shared, and—most importantly—enhance its visibility. Once visibility is improved, taking further action—such as implementing protective technologies, enforcing access restrictions, and establishing proper storage protocols—becomes a much more straightforward process.”

The Importance of Data Management
In today’s digital world, data has become one of the most valuable assets. For businesses and organizations, the proper management of data is critical for gaining a competitive advantage and increasing operational efficiency. However, to manage data effectively, one must first understand what the data is, how it is classified, and the conditions under which it is processed. This article will focus on the management, security, and risk analysis of both structured and unstructured data.

What Are Structured and Unstructured Data?
Data is generally divided into two main categories: structured and unstructured. Structured data refers to information organized in a specific format, typically stored in databases. Such data can be easily searched and analyzed. Unstructured data, on the other hand, lacks a fixed format and often originates from sources such as text files, emails, or social media posts. This type of data requires more complex analytical methods.

Data Security and Protection Methods
Data security is a critical issue for both structured and unstructured data. For structured data, it is essential to encrypt databases and restrict access solely to authorized individuals. In the case of unstructured data, data movement should be monitored and controlled using data loss prevention (DLP) software. This is necessary to prevent data from falling into the wrong hands.

Increasing Data Visibility
Data visibility is crucial for understanding how and where data is used. By enhancing the visibility of the data they possess, organizations can gain a better understanding of the conditions under which such data is shared and processed. This ensures that the measures taken for data security and management are more effective.