Safeguarding the digital world.

Exterro, a leading provider of data risk management software, today reinforced its commitment to safeguarding its clients’ most sensitive data by earning ISO 27001 certification, the international gold standard for data security. For legal, compliance and forensics professionals handling high-stakes data, this certification provides independent validation that Exterro’s security infrastructure meets the world’s most stringent risk management requirements. By adhering to these audited protocols, Exterro ensures that its global partners can manage sensitive information with total confidence and audit-ready transparency.

As we’ve covered throughout this year, companies of all sizes are more concerned about their data than maybe ever before. Now, as the regulatory landscape continues to shift worldwide and the sheer volume of data grows, businesses are finding it harder to work in siloes than to bring together leaders across the company. For example, security-focused data needs, including the classification and handling of PII and various detection and response capabilities, are traditionally the responsibility of the CISO or CIO. Legal teams likely set policies around data retention, meanwhile, but the two functions might not communicate effectively, even as they work with the same data.

Adopt a simple taxonomy: unacceptable, high, limited, minimal. Map your US “consequential decision” systems –including education, employment, lending/credit, essential government services, health care, housing, insurance, and legal services– to the high-risk bucket by default. Document the rationale for each classification. Publish a one-page “risk card” for each system (specifying purpose, impacts, level, and owner).