KuppingerCole Report
Advisory Note
By Karin Gräslund

Information Stewardship in the Age of Blockchain

Blockchain seems to be one of the most important basic technologies of emerging business models and countless entrepreneurial initiatives using it have been started in the recent past. This report provides insights and a closer look at how blockchain technology is most probably improving the current state of Information Stewardship. It highlights the most relevant value proposition, challenges and the changed processes to be expected from this emerging technology to Information Management and its included information-centered security processes.
By Karin Gräslund
kg@kuppingercole.com

1 Introduction and Management Summary

Blockchain seems to be one of the most important basic technologies of emerging business models, and a countless number of entrepreneurial initiatives ...

Further explained they can assist in the theoretical and practical development and acquisition of current and future blockchain-enabled business model ...

This report uses these patterns to argue on opportunities and challenges for Information Stewardship.

KuppingerCole recommends that organizations s ...

Login Free 30-day Select Access Get full Access

2 Meaning and tasks of Information Stewardship

As foundation for the analysis this chapter recapitulates the concept of Information Stewardship and briefly describes its tasks: which are in brief D ...

Login Free 30-day Select Access Get full Access

2.1 Defining information types and corresponding risks

Define information types: Information is the key organizational asset of our century and for best practice stewardship (i.e. for easy data consumptio ...

Login Free 30-day Select Access Get full Access

2.2 Propagating value and security level of information company wide

The follow-up to Information classification and the next (necessary) step in the information stewardship process is to make the level of value and inf ...

Login Free 30-day Select Access Get full Access

2.3 Controlling risks through information access management

The DIN standard DIN ISO/IEC 27001 identifies over a hundred controls and offers detailed advice on their application.

KuppingerCole advises taking ...

Login Free 30-day Select Access Get full Access

2.3.1 Managing data center risks

Dedicated service users should encrypt the data in secure storage with well protected keys as data-in-rest defense. Verizon reports RAM scraping as a ...

Login Free 30-day Select Access Get full Access

2.3.2 Managing end-user risks

According to Verizon’s studies in 2015, security breaches caused by internal users averaged out at 20% of the recorded incidents. To control their i ...

Login Free 30-day Select Access Get full Access

2.3.3 Managing mobile interface risk

Although Verizon 2015 and the 2016 Vormetric Data Threat Report show the current relevance of mobile intrusions is small relative to other damage, Kup ...

Login Free 30-day Select Access Get full Access

2.4 Promoting value-oriented information behavior, offering incentives and establishing an appropriate culture

Access by individuals to tangible assets and their poor understanding of the often abstract and intangible organizational values, are relevant sources ...

Login Free 30-day Select Access Get full Access

2.5 Becoming resilient to attacks

Resilience is the ability recover from an attack or other threatening event and return to normal operational modus. It results from the appropriate IS ...

Login Free 30-day Select Access Get full Access

3 Relevant characteristics of blockchain, usage patterns and value proposition

To later discuss the potential of blockchain technology for information stewardship, this chapter sum up its general characteristics and derives it’ ...

Login Free 30-day Select Access Get full Access

3.1 Replaces personal or institutional trust with hash numbers

Blockchain is a “personal trust-replacing” software which safeguards the accuracy of transactions through distributed algorithms and public or pri ...

Login Free 30-day Select Access Get full Access

3.2 Proves information integrity through distributed ledgers

The Economist magazine called blockchain a “great chain of being sure about things” in Autumn 2015, explaining its lean but mathematically and com ...

Login Free 30-day Select Access Get full Access

3.3 Provides current and and evolving blockchain usage patterns

Blockchain usage can be structured according to various criteria such as the practical maturity of use cases and the resulting characteristics for inf ...

Login Free 30-day Select Access Get full Access

3.3.1 Blockchain as reliable register of “digital Identity”

The blockchain builds a distributed ledger which is almost impossible to forge through automated third party escrow. It provides some kind of a digita ...

Login Free 30-day Select Access Get full Access

3.3.2 Blockchains for decentralized attributes and rules - as “digital referee”

Transactions can be combined with snippets of additional information which then also become embedded in the blockchain ledger, where the ID confirms t ...

Login Free 30-day Select Access Get full Access

3.3.3 Blockchain as distributed control of rules - “digital court” or “cyber law”

We call it “distributed control of rules for entitled asset” when the reliable registry of transactions (3.3.1), with embedded and decentralized s ...

Login Free 30-day Select Access Get full Access

3.4 Summarized Blockchain Value proposition

“Because of the remarkable advantages related to automation, transparency, auditability and cost-effectiveness, the blockchain may represent a disru ...

Login Free 30-day Select Access Get full Access

4 Vision of blockchain-enabled Information Stewardship

This chapter relates results from the preceding chapters on information stewardship, blockchain characteristics and it’s usage patterns. Firstly, it ...

Login Free 30-day Select Access Get full Access

4.1 Opportunities and challenges for established Information Stewardship

The following discussion and overview in table 1 assesses the opportunities and challenges of blockchain usage patterns for activities in established ...

As we may see, the maturity and the potential positive effects of blockchain may have been exaggerated in many public statements and articles so far. ...

Login Free 30-day Select Access Get full Access

4.1.1 Facilitates data integrity, compliance and therefore simplifies information availability

Blockchain as a trusted registry offers technical evidence of confidential and integer information on every sort of registered data in companies. This ...

Login Free 30-day Select Access Get full Access

4.1.2 Simplifies data protection, reduces the risk of fraud and simplifies confidentiality

Blockchain patterns improve data protection; once again consider our example of EU personal data protection: Blockchain can prevent data leakage and t ...

Login Free 30-day Select Access Get full Access

4.1.3 Enhances decentralized risk management for more efficient IAM

Earlier in this paper, we explained the three major risk points at which information can leak in relation to information access. These are:

  • while ...
Login Free 30-day Select Access Get full Access

4.1.4 Simplifies safely behavior and conveniently fosters value-oriented culture

The convenience of blockchain related to the relatively complicated procedures of secure data handling makes it easier for end-users to behave complia ...

Login Free 30-day Select Access Get full Access

4.1.5 Lowers TCO of information stewardship

The use of blockchain streamlines previous cumbersome and unhelpful administrative functions to uncover data leakage and breaches and enhances availab ...

Login Free 30-day Select Access Get full Access

4.2 Inspires business innovations for the larger data protection issues to come

In the following section we will explain how blockchain technology could continue to enhance information stewardship in the future and possibly accele ...

Login Free 30-day Select Access Get full Access

4.2.1 Reduces central and complex security processes to b2b, strengthens availability and confidentiality

Blockchain usage would allow more efficient b2b as paperless trading, this is obvious from the example of trading: It eases supply chain management an ...

Login Free 30-day Select Access Get full Access

4.2.2 Enables decentralized Information Access Management - “Smart User-IDs”

Problems relating to user IDs might also find a solution in blockchain technology. Although blockchain is currently not part of an existing solution f ...

Login Free 30-day Select Access Get full Access

4.2.3 “smart properties“ and Life Management Platforms

Blockchain solutions could provide Smart-IDs for every aspect of life and give legal and entitled rules control for every information object and where ...

Login Free 30-day Select Access Get full Access

5 Conclusion and recommendation

The blockchain is a disruptive technology which seems to have tremendous transformative potential in some of the tasks in information stewardship, to ...

Login Free 30-day Select Access Get full Access

Copyright

©2020 KuppingerCole Analysts AG all rights reserved. Reproduction and distribution of this publication in any form is forbidden unless prior written permission. All conclusions, recommendations and predictions in this document represent KuppingerCole´s initial view. Through gathering more information and performing deep analysis, positions presented in this document will be subject to refinements or even major changes. KuppingerCole disclaim all warranties as to the completeness, accuracy and/or adequacy of this information. Even if KuppingerCole research documents may discuss legal issues related to information security and technology, KuppingerCole do not provide any legal services or advice and its publications shall not be used as such. KuppingerCole shall have no liability for errors or inadequacies in the information contained in this document. Any opinion expressed may be subject to change without notice. All product and company names are trademarksTM or registered® trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.

KuppingerCole Analysts support IT professionals with outstanding expertise in defining IT strategies and in relevant decision-making processes. As a leading analyst ompany, KuppingerCole provides first-hand vendor-neutral information. Our services allow you to feel comfortable and secure in taking decisions essential to your business.

KuppingerCole, founded back in 2004, is a global, independent analyst organization headquartered in Europe. We specialize in providing vendor-neutral advice, expertise, thought leadership, and practical relevance in Cybersecurity, Digital Identity & IAM (Identity and Access Management), Cloud Risk and Security, and Artificial Intelligence, as well as for all technologies fostering Digital Transformation. We support companies, corporate users, integrators and software manufacturers in meeting both tactical and strategic challenges and make better decisions for the success of their business. Maintaining a balance between immediate implementation and long-term viability is at the heart of our philosophy.

For further information, please contact clients@kuppingercole.com.

top