What do organizations overlook when it comes to data security?

Speaking to Wise TV, Sema Erkan, Assistant Manager of Corporate Resilience at AXA, emphasized that data security encompasses not only personal data but also corporate data and all other forms of information.

While the term “data security” is often interpreted primarily as the protection of personal data, it also extends to the safeguarding of corporate data and all other types of information. So, what is the greatest risk here? In reality, it almost always comes down to human awareness. Organizations make investments in data security—such as deploying Data Loss Prevention (DLP) software—yet a single mistake by one employee can, unfortunately, bring all these risks back to the forefront. In my view, the most significant investment should be directed toward employees and individuals; raising awareness, continuously measuring that awareness, and developing and monitoring policies tailored to specific needs are crucial steps. Naturally, when we talk about data security, there are both global standards and local regulations that we are obligated to follow. Beyond the protection of personal data—governed by the Personal Data Protection Law (KVKK) in Türkiye and the General Data Protection Regulation (GDPR) internationally—we can achieve a comprehensive approach to data security by leveraging frameworks such as the ISO 27001 information security management system and the ISO 27701 standard, which addresses both information security and privacy.

The Importance and Scope of Data Security

In today’s digital age, data security is of critical importance for both individuals and organizations. While the protection of personal data often lies at the heart of the concept, corporate data and all other forms of sensitive information also fall within its scope. Data security cannot be achieved through technical measures alone; it also requires careful consideration of the human factor. In this article, we will explore the importance of data security, the risks involved, and methods for addressing these risks.

The Role of the Human Factor

One of the greatest risks to data security is human error. Although technological investments and software are essential tools for preventing data loss and leaks, employee awareness and training are indispensable components of the process. Raising awareness among staff and providing continuous training enhances the effectiveness of data security policies.

Data Security Investments

Investments in data security should encompass not only software solutions—such as Data Loss Prevention (DLP) tools—but also programs designed to improve employee training and awareness. These investments must be supported by the development and regular updating of data security policies.

Global and Local Regulations

Data security is also reinforced by global and local regulations. Frameworks such as the Personal Data Protection Law (KVKK) in Türkiye and the General Data Protection Regulation (GDPR) in Europe establish standards for the protection of personal data. These regulations serve as a guide for the development of data security policies. The Role of ISO Standards

International standards, such as ISO 27001 and ISO 27701, play a significant role in the establishment of information security management systems. These standards provide the necessary frameworks for ensuring data security, and by adhering to them, organizations are able to address data security from a holistic perspective.

A Holistic Approach to Data Security

Adopting a holistic approach is essential for ensuring data security. This approach entails the integrated consideration of technical measures, the human factor, regulatory compliance, and international standards. In this way, data security risks can be minimized, and the integrity of data can be preserved.

Conclusion

In today’s world, data security is of vital importance for both individuals and organizations. As the human factor emerges as one of the greatest risks to data security, it is necessary to enhance employee training and awareness to mitigate this risk. While global and local regulations provide guidance for the development of data security policies, ISO standards further increase the effectiveness of these policies. By adopting a holistic approach, it is possible to ensure data security and maintain the integrity of data.