Chaos-hackers grab what they can and throw it on the wall like a big bowl of spaghetti. How do you stop it?
Feinman recommends that organizations take an inventory of the sensitive data they have and get rid of any data they don’t need. “We’re seeing more customers using our ‘shredder’ feature now,” he says. “If you aren’t going to use it, there’s no reason to keep it around.”
The best way to secure data is to purge what you don’t absolutely need. It’s true for PCI DSS, and it’s true for everything else.