The Singapore Personal Data Protection Act (PDPA) of 2012 establishes a general data protection law governing the collection, use, and disclosure of an individual’s information by an organization. With penalties that target the organization and the individual, PDPA strives to entrench the protection of personal data into the business culture of an organization. The foundation...

Comply with Government Security (DCS) Classifications Policy The UK Government Security Classifications (GSC) policy requires that all UK government organizations classify their information assets into one of three types: OFFICIAL, SECRET and TOP SECRET. This simplified classification scheme replaces the previous Government Protective Marking Scheme (GPMS), making it easier...

The Problem The Controlled Unclassified Information (CUI) program standardizes the way all U.S. government agencies and military entities handle unclassified information that requires safeguarding. It clarifies and limits what kinds of information to protect, defines what is meant by “safeguard,” reinforces existing legislation and regulations, and promotes authorized...

The Problem Over the last several years many compliance regulations have sprung up globally. Organizations doing business in regions covered by these mandates have been forced to change their business practices in order to remain compliant. These regulations require organizations to have visibility into what data they possess, and where it is located. This remains a challenge...

Use Data Classification To Enhance Your Data Security Fortra’s Data Classification Suite (DCS) products provides the essential classification tools to clearly inform both your people and your policies on what information should be secured and how to handle it. Manage and protect your data with the industry’s most flexible and customizable classification metadata schema. Give...

The CCPA bill, passed in 2018, encourages businesses and related entities to be transparent and requires these organizations to report breaches of personal data. The CCPA is more than just a regulation, as it represents a core change in the approach organizations must take to ensure their data remains secure and requires the creation of a data protection strategy for their...

Protect Data and Meet Compliance Requirements Financial institutions face immense pressure to protect the data they create and collect. These organizations must be ever vigilant to the possibility of a data breach caused either by malicious actors or through employee mistakes. In either case, a data breach carries with it severe consequences, from heavy fines to the loss of...

Meet Compliance Requirements to Protect Personal Information in South Africa The mandate of South Africa’s Protection of Personal Information Act (POPIA) is to regulate the processing of personal information. With this Act, data breaches need to be reported by law. Organizations need to develop a clear data protection plan to build trust with customers, drive business growth,...

Challenge: STANAGs 4774, 4778 And NATO today Intelligence and military communities have historically worked in isolated silos. In recent years, these organizations have begun to embrace the need for sharing critical information with allies in an effort to receive similar critical information and intel in return. Because the North Atlantic Treaty Organisation (NATO) includes...

The aerospace and defense organizations operate on a global scale and handle data that needs to be protected from competitors as well as foreign military and government organizations. Competitive secrets, disparate customer requirements, and government regulations surrounding the sharing of sensitive information are critical considerations in the aerospace and defense...

Meet Compliance Requirements To Protect Controlled Unclassified Information Originally imposed in 2017, NIST Special Publication (SP) 800-171, Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations, requires all current U.S. Department of Defense contractors to be be compliant with DFARS Part 252.204-7012. Other executive branch...

Since the launch of GDPR in 2018, organizations have been forced to change their business practices in order to remain compliant. GDPR compliance requires organizations to have visibility into what data they possess, and where it is located. This remains a challenge for many organizations who don’t yet have solutions in place to understand where their data lives and what it...

Swift action to commands based on operational understanding are hallmarks of a high-performing and responsive military. And the exchange of classified and even unclassified data – often in electronic form – are the lifeblood for any military organization to thrive and achieve mission success. The key is keeping sensitive data out of the hands of the wrong people. “With the...

Mobile Users Can Now Access And Share RMS Protected Information On Mobile Devices With the growth of mobile and cloud technologies it is more important than ever to apply protection that travels with the data. If your information is encrypted it is always protected, even if lost or stolen. Microsoft® Rights Management Services (RMS) provides protection for sensitive documents...

The Australian Government Email Protective Marking Standard (EPMS) is a set of requirements that organizations must follow in order to protect sensitive and classified information that is sent or received by email. The Australian EPMS has been updated several times since its origin in 2005. Read our solution brief to learn about the changes to Email Protective Marking...

On-premises deployment While many industries are turning to the cloud for digital transformation, some organizations are not yet ready to deploy their highly sensitive data to the cloud and continue to choose on-premises. There are several reasons why an organization might choose on-premises deployment, including: Organizational/regional requirements: Depending on industry...

How does Fortra’s Data Classification Suite help with CUI? Fortra’s Data Classification Suite was designed to help U.S. Federal agencies comply with the National Archives and Records Administration’s (NARA) Controlled Unclassified Information (CUI) program. With DCS, you can ensure emails and documents are properly marked and identified, and sensitive CUI data is protected. ...

With the volume and speed of data being created and shared at an all-time high, your organization’s sensitive information is likely in a myriad of locations including emails, presentations, spreadsheets, documents, PDFs, videos, and images. Should that data be exposed, it could have serious repercussions for your organization, such as reputation damage, loss of government...

Many organizations allow their employees to access email through Web browsers to offer a more flexible work environment. Microsoft Outlook Web App (OWA*) provides users with a familiar email and calendar experience across both Windows and Mac platforms. But while convenient for users, this can make organizations more vulnerable to data leakage. Fortra’s Data Classification...