Approach

Advantages

Disadvantages

Physical protection

Protection of equipment from theft and damage

Does not protect against internal threats

Access management

Control of actions and restriction of user rights

Configuration complexity, risk of errors

Encryption

A high level of data integrity

Reduced performance, the need for key management

Backup

The possibility of data recovery

Risk of backup leaks

Monitoring and auditing

The possibility of detecting violations

High costs and resource demands

Staff training

Improved literacy and attentiveness

Requires time and a systematic approach