The money you're spending on IT security is not securing your data. You're probably spending more on IT security every year, but still failing to address the security of your data. In many cases it's not actually your information, but information you hold on behalf of other people, who expect you to protect such information about their lives. So how can you actually secure the information you hold on behalf of the those other people? Or if it is actually your organisation's intellectual property, how can you secure it?
RED-data can provide advice regarding how your organisation can reduce risk by following the fundamental principles of RED-data: Reduce, Encrypt, Delete. This work involves: