Plan a data security strategy

Builds a strategy to protect a company's data from malicious actors, from how the data is stored and shared.

Task: Develop a cybersecurity strategy that protects [company or team name] against malicious actors. Context: Data is stored in [databases, cloud services, laptops, paper] and shared through [internal tools, email, partners, customers]. The most sensitive data is [customer data, payments, source code, other]. The team is [number of people, who handles IT, and security skills]. Budget and deadline: [amount and date, or none]. Rules: - Work out the strategy in numbered steps. Cover encryption methods for stored and shared data, firewall and network measures, and policies that mark certain activities as suspicious. - Start with the steps that reduce the most risk for the least effort. - For each major measure, name what it costs in money, effort and daily convenience, and what risk it leaves open. - If two options fit, say which one you would pick for this situation and why. - State that this is general information, not professional security advice, and name the points that a specialist should check. Result: A numbered plan of at most 10 steps, each with one line on what to do and one line on why. End with the three risks that remain after the plan and a 30 day first action list.

Based on a prompt by devisasari

Updated