Data-centric security

Concept and objectives:

A core challenge around data-centric security assumes the data may leave trusted environments, so protection must “travel with the data” through encryption, labeling, policy enforcement, and identity-aware controls. Data-centric security is often organised around protecting data in three states: data at rest (e.g. old data may remain stored longer than necessary, increasing exposure or may be protected with old encryption), data in transit (e.g. traffic moving in computing continuum increases complexity) and data in use (e.g. sensitive AI training data may leak through model outputs or prompts). This session will explore these challenges and will address possible solutions, both current and future and will give insight into major trends in the EU regulations, including the shift from simple compliance checklists towards continuous risk management and demonstrable data governance. 

Session leads:

• Francesco Regazzoni, University of Amsterdam

• Aljosa Pasic, Bull, Consultant

• Mamoona Asgar, University of Galway