Intellectual property (IP) is the lifeblood of every organization. It did not used to be. As a result, now more than ever, it is a target, placed squarely in the crosshairs by various forms of cyber-attack. Your company's IP, whether that's patents, trade secrets or just employee know-how, may be more valuable than its physical assets. Security pros must understand the dark forces that are trying to get this information from your company and piece it together in a useful way. Some of these forces come in the guise of "competitive intelligence" researchers who, in theory, are governed by a set of legal and ethical guidelines carefully wrought by the Society of Competitive Intelligence Professionals (SCIP). Others are outright spies hired by competitors, or even foreign governments, who will stop at nothing, including bribes, thievery, or even a pressure-activated tape recorder hidden in your CEO's chair.
IP protection is a complex duty with aspects that fall under the purview of legal, IT, human resources, and other departments. Ultimately a chief security officer (CSO) or risk committee often serves to unify intellectual property protection efforts. With protection from cyber-attack now critical, the chief information security officer (CISO) now plays a major role.
Here are few ways in which you can protect your intellectual property:
1. Know what intellectual property you have got: If all employees understand what needs to be protected, they can better understand how to protect it, and from whom to protect it. To do that, CSOs must communicate on an ongoing basis with the executives who oversee intellectual capital. Meet with the CEO, COO and representatives from HR, marketing, sales, legal services, production, and R&D at least once a quarter. Corporate leadership must work in concert to adequately protect IP.
2. Know where your intellectual property is: If you focus your efforts on your core IT systems to secure IP, you will overlook other areas where it might be stored or processed. These include:
I. Printers, copiers, scanners, and fax machines: Your input/output devices all store the documents they process, and they are typically networked and connected to remote management systems. Proper policies and procedures need to be in place to purge these documents and protect against unauthorized access.
II. Cloud applications and file-sharing services: These might be company-managed or shadow IT. You need to know what your employees are using so you can restrict unauthorized cloud services and ensure that company-sanctioned services are properly configured and secured.
III. Employees’ personal devices: An employee might email a document home, typically for benign reasons. Educate your employees on the proper handling of IP and have monitoring systems in place to track where your IP is being sent.
IV. Third-party systems: IP is often shared with business partners, suppliers, or customers. Make sure your contracts with those parties define how those third parties must secure your IP and have controls in place to ensure those terms are followed.

3. Prioritize your intellectual property: CSOs who have been protecting IP for years recommend doing a risk and cost-benefit analysis. Make a map of your company's assets and determine what information, if lost, would hurt your company the most. Then consider which of those assets are most at risk of being stolen. Putting those two factors together should help you figure out where to best spend your protective efforts (and money).
4. Label valuable intellectual property: If information is confidential to your company, put a banner or label on it that says so. If your company data is proprietary, put a note to that effect on every log-in screen. This seems trivial, but if you wind up in court trying to prove someone took information they weren't authorized to take, your argument won't stand up if you can't demonstrate that you made it clear that the information was protected.
5. Secure your intellectual property both physically and digitally: Physical and digital protection is a must. Lock the rooms where sensitive data is stored, whether it's the server farm or the musty paper archive room. Keep track of who has the keys. Use passwords and limit employee access to important databases.
6. Educate employees about intellectual property: Awareness training can be effective for plugging and preventing IP leaks, but only if it is targeted to the information that a specific group of employees needs to guard. When you talk in specific terms about something that engineers or scientists have invested a lot of time in, they are very attentive. As is often the case, humans are often the weakest link in the defensive chain. That is why an IP protection effort that counts on firewalls and copyrights but does not also focus on employee awareness and training, is doomed to fail. In most cases, IP leaves an organization by accident or through negligence. Make sure your employees are aware of how they might unintendedly expose IP. According to a February 2019 study by Egress Software Technologies, the most common technologies through which sensitive data like IP are accidentally breached are:
I. External email like a Gmail or Yahoo account (51 percent)
II. Corporate email (46 percent)
III. File sharing via FTP (40 percent)
IV. Collaboration tools like Slack or Dropbox (38 percent)
V. SMS or instant messaging apps like Whatsapp (35 percent)
With email, IP might be sent to the wrong person because:
I. The sender used a wrong address--for example, Outlook auto-inserted an email address for someone other than the intended recipient
II. The recipient forwarded the email
III. An attachment contained hidden content, such as in an Excel tab
IV. Data was forwarded to a personal email account
7. Know your tools to protect intellectual property: A growing variety of software tools are available for tracking documents and other IP stores. Data loss prevention (DLP) tools are now a core component of many security suites. They not only locate sensitive documents, but also keep track of how they are being used and by whom. Encrypting IP in some cases will also reduce risk of loss. The Egress survey data shows that only 21 percent of companies require encryption when sharing sensitive data externally, and only 36 percent require it internally.
8. Take a big picture view: If someone is scanning the internal network and your intrusion detection system goes off, somebody from IT typically calls the employee who is doing the scanning and tells him to stop. The employee offers a plausible explanation, and that is the end of it. Over time, the human resources group, the audit group, the individual's colleagues, and others all notice isolated incidents, but nobody puts them together and realizes that all these breaches were perpetrated by the same person. Therefore, communication gaps among info security and corporate security groups can be so harmful. IP protection requires connections and communication between all the corporate functions. The legal department must play a role in IP protection. So does human resources, IT, R&D, engineering, graphic design and so on.
9. Apply a counter-intelligence mindset: If you were spying on your own company, how would you do it? Thinking through such tactics will lead you to consider protecting phone lists, shredding the papers in the recycling bins, convening an internal council to approve your R&D scientists' publications, or other ideas that may prove worthwhile for your particular business.
10. Think globally: Over the years, France, China, Latin America and the former Soviet Union states have all developed reputations as places where industrial espionage is widely accepted, even encouraged, as a way of promoting the country's economy. Many other countries are worse. A good resource for evaluating the threat of doing business in different parts of the world is the Corruption Perceptions Index published each year by Transparency International. In 2016, the Corruption Perceptions Index ranked the following 12 countries as being "perceived as most corrupt": Somalia, South Sudan, North Korea, Syria, Yemen, Sudan, Libya, Afghanistan, Guinea-Bissau, Venezuela, Iraq and Eritrea.
Besides if you do have any questions give me a call: https://clarity.fm/joy-brotonath