US Telecoms face tightened data security regulations: How Data Platform Teams can stay ahead with Raito

Years of self-regulation in cybersecurity have left critical infrastructure vulnerable, and the consequences are now clear. Just days ago, it was revealed that a ninth U.S. telecom firm was compromised by the Salt Typhoon, the Chinese cyber espionage group, with hackers maintaining year-long access to sensitive data from prominent U.S. figures.

In response, earlier last month, Senator Wyden proposed long-overdue legislation pushing the FCC to finally strengthen cybersecurity regulations for telecoms—the first update in 30 years.

While this legislation isn't specifically focused on AI and Analytics infrastructure, it will have wide-reaching impacts. Once enacted, telecom companies will have just one year to comply with the following key requirements, which will also affect Data Platform Teams. Among the requirements imposed, organisations will have to :

• Prevent unauthorised access to call-identifying information.
• Undergo independent yearly security audits.
• Report audit findings to regulatory commissions.
• Implement corrective actions in the event of non-compliance.

As Telecoms are continuing to migrate their AI and Analytics workloads to the cloud, their data platform teams will have to put efficient data security workflows in place that enable sufficient security while keeping your data users productive. Unfortunately, this is hard to achieve with traditional IAM technology, as shown by the Terabytes of data stolen from thousands of AWS customers. That’s why Data Platform Teams at Telecoms use Raito to:

• Implement least-privilege access management: Data Product Owners can use Raito to intuitively restrict access to Data Products and dynamically mask data using policies. 
• Monitor and report compliance: The Auditor can centrally monitor who has access to call-identifying information, how they use that data, and who has granted access to that data. Raito’s identity centric monitoring.
• Log and monitor corrective actions: The Data Governance Team can use Raito to log and assign corrective actions and monitor their status.

Reach out to our experts or read more about how our customers use Raito to streamline access management to data products.