What is Technical Information Protection?

Every organisation can face data leaks because of what insiders do. How can you build the data protection system that works in reality, not just on paper? In this article, we will examine what Technical Information Protection is and what needs to be done to ensure that it works effectively, not just formally.

General information about information protection

Technical Information Protection (hereinafter referred to as TIP) is a systematic approach to ensuring the Information Security (IS) of an organisation, which is based on integration of software and hardware, engineering solutions, regulatory and organisational regulations, and technologies.

The main task of TIP is to ensure reliability, accessibility and confidentiality of data collected, processed and stored by enterprises.

Threats to Information Security

Information Security threats are actions or inactions that could lead to loss of confidentiality of protected data, as well as compromising its integrity and availability.

IS threats can be external

• Introduction of malicious software, including viruses, Trojans, exploits, ransomware.
• DDoS attacks — massive traffic flows aimed at disrupting the organisation's systems.
• Leakage through TEMPEST channels. Interception of electromagnetic emissions generated by computers, monitors, network and server equipment, radios, telephones, etc.
• Leaks through external services, such as cloud storage, collaboration platforms, CRM systems, and other tools.
• Social engineering, phishing. Deceiving employees in order to gain access to bank accounts and the enterprise's information system (IS).
• Injection of arbitrary SQL code to hack applications and websites.
• Attacks on the supply chain, i.e. exploiting the IS vulnerabilities of contractors and partners to infiltrate your organisation's corporate network.
• Physical intrusion into the territory where information assets are stored. If it is easy to gain access to a room containing protected data or data carriers, implementation of technical security measures will be pointless.
• Natural disasters, natural and man-made catastrophes. We are talking about floods, hurricanes, earthquakes, fires and other natural phenomena that can damage IT infrastructure or destroy media. Electromagnetic pulses and power failures can also disrupt the operation of information systems, thereby limiting data availability.

IS threats can be internal

The human factor. Even the most expensive TIP system will not be effective if employees click on phishing links, lose storage devices, create simple passwords, install untested applications, or send confidential documents to wrong recipients.

The statistics are grim: according to a 2024 study by Mimecast, up to 95% of data breaches were caused by human error.

Insider actions, intentional disclosure or theft of protected information. We are talking about industrial espionage, sabotage, abuse of privileges.

Our experience shows that most attempts to transfer or steal data occur via instant messengers, email, social networks and USB drives.

Negligence. Violation of Information Security regulations, gross errors in destruction of media, leaving devices and storage media unattended, weak password policy, etc.

Technical measures for protecting information

• Engineering barriers as a method of preventing physical access to Information Security objects: introduction of the access control system at an enterprise, installation of perimeter fencing, grilles, safes, locks.
• Installation of fire protection systems, emergency warning systems, and security alarms.
• Protection against leaks through TEMPEST channels, including shielding, installation of broadband interference transmitters and electromagnetic noise generators.
• Regular inspection of devices and media for serviceability, and of premises, and communications for compliance with Information Security requirements. Audit of access to official documents and objects constituting commercial, official, medical and other secrets.
• Implementation of technical means of information protection.

Let's take a closer look at them.

Classification of information protection measures

Technical Means of Information Protection (TMIP) are hardware and software-hardware solutions. The purpose of implementing TMIP is to prevent unauthorised distribution, distortion or destruction of sensitive information.

• SIEM systems, or tools for collecting and analysing Information Security events within the corporate network.
• DLP systems. Solutions for preventing leaks caused by company employees.
• Antivirus software to prevent installation of malicious software.
• Firewalls for filtering network traffic according to predefined conditions.
• Intrusion detection and prevention tools to identify and block suspicious activity within the corporate network.
• Cryptographic protection tools for data encryption.
• Access control systems for distinguishing between user and device rights.

When implementing TIP tools, make sure that they do not affect business processes and do not interfere with your employees' ability to perform their job duties.

Organization of an Information Security system at an enterprise

When developing a TIP system, take into account characteristics of your company's IT infrastructure and specifics of data you collect and process.

Before purchasing a set of technical security measures, it is necessary to develop and implement the Information Security policy.

The next step is to take inventory of all information assets, analyse which documents your employees have access to, and which files they store on their work computers.

Next, identify each information channel used within the organisation. Most often, these are email and its web versions, messengers, social networks, USB drives, printers, FTP, IP telephony and others.

An important way you can help your security team is through staff securitisation, i.e. measures aimed at raising employee awareness of cyber hygiene and safe online behaviour.

In conclusion

The issue of ensuring technical security must be addressed at all levels of company's operations: strategic, tactical and operational. Influence of the human factor.

To reduce the number of errors and prevent leaks due to staff actions, it is important to combine regular IS training with checks on how employees are complying with security policies. This can be verified using the DLP system, among other methods.