{"id":3866,"date":"2026-11-01T22:55:00","date_gmt":"2026-11-01T22:55:00","guid":{"rendered":"https:\/\/chennaiorbit.com\/blog\/?p=3866"},"modified":"2026-11-01T22:55:00","modified_gmt":"2026-11-01T22:55:00","slug":"datasecops-five-dates-short-history","status":"publish","type":"post","link":"https:\/\/chennaiorbit.com\/blog\/datasecops-five-dates-short-history\/","title":{"rendered":"DataSecOps in Five Dates: A Short Modern History"},"content":{"rendered":"

Every practice has a history that nobody wrote down while it was happening. Ask someone in data protection when their field began and you will get a shrug, because it arrived the way neighbourhoods age: one small change at a time, until suddenly the street has a different name. DataSecOps is the newest name on that street, and its story fits in five dates \u2014 a database feature nobody applauded, a blog post that named a job people were already doing, a year of stolen passwords, a takeover bid, and a bill that finally put the whole thing on chief executives’ desks. Walk the five in order and the trend line becomes obvious: protection has been moving from yearly projects toward something continuous, priced, and impossible to ignore.<\/p>\n

Before the first date: what DataSecOps actually names<\/h2>\n

One definition first, so the dates mean something. The word was put into circulation by Ben Herzberg of the vendor Satori Cyber on 4 August 2021, and it names a habit rather than a product: security that keeps pace with datasets and their users as both keep moving underneath it. It remains a vendor’s word \u2014 no standards body has signed it \u2014 while the formal world keeps writing data security governance into its papers. The habit itself is older than the word, which is exactly why a history told through dates works: the word arrived late to a job that had been quietly forming for years.<\/p>\n

Date one: January 2016, a feature nobody applauds<\/h2>\n

PostgreSQL 9.5 shipped row-level security that winter, letting a database decide, row by row, who may see what. No keynote celebrated it; most teams took years to switch it on. But look at what it started: protection moving out of network diagrams and into the tables themselves, evaluated at the moment somebody actually asks for a value. Apache Ranger brought comparable row filters and column masking to the Hadoop world from version 0.6, and the bigger warehouses followed with their own native versions. The direction of travel was set before anyone had a word for it \u2014 controls were moving inward, toward the data, and they would never move back out. Everything this history records afterwards is, in one way or another, the consequences of that quiet migration: once the table decides who sees it, the questions about who owns the table, who approves access and who reads the logs stop being theoretical.<\/p>\n

Date two: 4 August 2021, the DataSecOps word arrives<\/h2>\n

Herzberg’s defining piece gave the scattered work a name and, more usefully, a shape: discovery, classification, rules written as code, enforcement, control of what leaves, reading of access history, and periodic review with real revocations. The full scope, borders included, is documented in the Ops Atlas entry for DataSecOps<\/a>, the reference this whole history leans on. The borders matter as much as the shape \u2014 pipes and pipeline work sit with DataOps, lawful-basis questions sit with PrivacyOps, staff identities sit with IAMOps \u2014 so teams could tell their new problem apart from their old ones. Naming matters more than outsiders assume. Once the job has a label, budget lines can reference it, job posts can require it, and the person doing it stops being the unofficial keeper of passwords and becomes a role with a title.<\/p>\n

Date three: 2024, the passwords come home to roost<\/h2>\n

The theory met its stress test that year. A criminal group tracked as UNC5537 spent 2024 logging into customers of cloud-data platforms with usernames and passwords harvested months earlier by infostealer malware \u2014 the majority of the hit accounts had appeared in those criminal logs beforehand, second factors were largely missing, and some credentials had stayed unchanged for four years. Records left through the database’s own bulk-copy command; the platforms themselves held. Around 165 organisations ended up notifying. The episode re-ordered every priority list overnight: identity hygiene first, because the perimeter had quietly moved from the network to the login form years earlier without most organisations noticing. Insurance questionnaires, procurement forms and board packs all grew a credential-rotation line within months of the disclosures, which is how a security lesson becomes an administrative fact.<\/p>\n

Date four: 28 August 2025, the buyer shows up<\/h2>\n

Consolidation announced itself late that summer, when backup giant Commvault moved to acquire Satori Cyber, the very vendor whose chief scientist had coined the word in 2021, naming a preliminary figure of USD 28.3 million. Read it as the market declaring the practice permanent: the tooling for protecting data in motion was worth folding into a platform company, not leaving as a boutique. The same season, Europe’s top court added legal nuance in the C-413\/23 P ruling (EDPS against SRB) \u2014 coding data protects recipients who cannot undo the coding, but never the party holding the key \u2014 and Gartner formalised the shopping aisle with its data security platforms market guide. A field gets buyers, rulings and analyst categories in that order; all three landed inside one year.<\/p>\n

Date five: 2026, the DataSecOps bill comes due<\/h2>\n

IBM’s 2026 research landed on USD 4.99 million as the average price of a breach \u2014 the series’ worst reading yet, and the number that turns protection from a technical preference into a board item. Every earlier date built toward this one: the engines supplied controls, the word supplied vocabulary, the attacks supplied evidence, the consolidation supplied procurement channels, and the bill supplies urgency. The trajectory keeps its slope, too. Teams that once scheduled an annual audit now run quarterly reviews that actually revoke; grants carry expiry dates instead of lifetimes; and classification, once a dusty spreadsheet, has become the first chapter of every serious rollout.<\/p>\n

What the five dates mean from here<\/h2>\n

Extrapolating a trend is a risk, but the direction is legible: protection behaves less like an event and more like maintenance \u2014 scheduled, evidenced, and owned by name. For organisations still waiting, the five dates compress into a single instruction: start the inventory now, because every actor in this story \u2014 the engines, the buyers, the attackers, the courts \u2014 has already moved. Operators in any trade can watch the same pattern in their own domain, wherever structure meets scrutiny: a city that plans its welcome properly, as the guides to planning a first trip to Chennai<\/a> and its full attractions, heritage and culture<\/a> show, earns the trust that a city merely famous for it \u2014 an important cultural city in South India<\/a> \u2014 has spent centuries building. Protection histories read the same way: the trust was banked slowly, then spent quickly.<\/p>\n

The dates, gathered for quick citation:<\/p>\n