Loss and theft of Information from organizations continues to be a significant problem. The new data protection regulations in the EU will increase focus on this area. Given the amount of attention to this problem and the wealth of standards and technology available – why do these leaks still occur? This document considers the sources of leakage and describes how better information stewardship based on information centric security is essential to manage these risks and mitigate any problems resulting from leakage of information.

Information stewardship is not a new term; it has been in use since the 1990’s and covers the wide range of challenges involved in managing information as a key organizational asset. These include the management of the whole information lifecycle from ownership to deletion as well as aspects like business value, data architecture, information quality, compliance and security. This report focuses on the information security and resilience aspects that can be improved through better stewardship...