The three goals of data protection
Availability
Get your data back after a failure, theft or ransomware thanks to reliable backups.
Integrity
Prevent them from being altered or corrupted without you knowing.
Confidentiality
Limit access to authorised people, encrypt what is sensitive.
Backups, without nasty surprises
The 3-2-1 rule remains the reference: 3 copies of your data, on 2 different media, 1 of them off-site and isolated from the network. It protects against failure, theft and above all ransomware, which also encrypts reachable backups. A backup only truly exists if restoration has been tested. Details in our guide 3-2-1 backup and ransomware.
Encryption and access management
- Disk encryption on laptops and phones: a lost device does not become a data leak.
- Encryption of backups and sensitive exchanges.
- Least privilege: everyone accesses only what they need.
- Two-factor authentication on e-mail, cloud and admin accounts.
- Regular rights review, and immediate access removal when someone leaves.
Personal data and GDPR
If you process customer or employee data, the GDPR requires appropriate security measures and notification of data breaches within 72 hours to the supervisory authority (the CNIL in France) where risk is established. We help structure the technical security; the legal side is for specialised counsel.
For a complete review, start with an IT security audit.
