Implementation and management of information security for distributed data storage systems

A method for providing security to Big Data of an organization, the method comprising:

• obtaining, via one or more hardware processors, one or more security related inputs from a user for a Big Data environment deployed in the organization;
• converting, via the one or more hardware processors, the one or more security related inputs into at least one security requirement for the Big Data environment;
• identifying, via the one or more hardware processors, a security policy template from amongst a plurality of pre-defined security policy templates based on a security reference architecture and the at least one security requirement, wherein the security policy template represents a plurality of security controls, and wherein the security reference architecture is indicative of the plurality of security controls categorized in a plurality of security layers and security control selection rules;
• selecting, via the one or more hardware processors, one or more security controls from amongst the plurality of security controls based on the at least one security requirement;
• identifying, via the one or more hardware processors, one or more existing security controls implemented in the Big Data environment based on at least one environment parameter;
• comparing, via the one or more hardware processors, the selected one or more security controls with the one or more existing security controls implemented in the Big Data environment to determine a security control from amongst the selected one or more security controls that is not implemented in the Big Data environment;
• and
• implementing, via the one or more hardware processors, the security control in the Big Data environment to provide security to the Big Data of the organization.

A non-transitory computer-readable medium having embodied thereon a computer program for executing a method comprising:

• obtaining one or more security related inputs from a user for a Big Data environment deployed in an organization;
• converting the one or more security related inputs into at least one security requirement for the Big Data environment;
• identifying a security policy template from amongst a plurality of pre-defined security policy templates based on a security reference architecture and the at least one security requirement, wherein the security policy template represents a plurality of security controls, and wherein the security reference architecture is indicative of the plurality of security controls categorized in a plurality of security layers and security control selection rules;
• selecting one or more security controls from amongst the plurality of security controls based on the at least one security requirement;
• identifying one or more existing security controls implemented in the Big Data environment based on at least one environment parameter;
• comparing the selected one or more security controls with the one or more existing security controls implemented in the Big Data environment to determine a security control from amongst the selected one or more security controls that is not implemented in the Big Data environment;
• and
• implementing the security control in the Big Data environment to provide security to the Big Data of the organization.