In summary, taking your security program to the next level includes categorizing your critical data and assets. As the saying goes, you can’t protect what you don’t know about. As part of your asset management and inventory, you should categorize your critical assets and data. Once you know where your critical data resides, you need to also categorize the assets, whether on-premises or in the cloud, as critical and understand how data flows. Once you know what your critical assets are, you can then implement controls to secure the data.

In the next chapter, we will be covering Artificial Intelligence (AI) and cybersecurity. With AI being the next big thing and the huge move toward it, we need to consider security measures around AI and how it can be used both by hackers and for defense.