Nick Jovanovic, vice president of Thales’ eSecurity federal division, has said the federal government should implement best practices to protect sensitive data from identify theft and other cyber threats.
Jovanovic wrote in a blog post published Tuesday that encrypting personally identifiable information and personal health information and controlling access to decrypted data through the principle of least privilege are some of the standard practices agencies should exercise.
“POLP is the practice of limiting access rights for users to the bare minimum permissions they need to perform their work,†he explained.
Jovanovic suggested such cyber hygiene practices amid reports that the Federal Emergency Management Agency shared with a contractor the personal data of over 2M disaster victims.