What is crown-jewel data?
The small percentage of your information whose loss, theft, exposure or destruction would cause material harm — financially, legally, competitively or personally.
What is crown-jewel data — and how should you protect it?
Crown-jewel data is the information whose loss, theft, exposure or destruction could materially harm a company, an organisation or an individual.
How do you identify it?
Ask one question of each data set: if this appeared publicly tomorrow, or vanished, what would it cost us? Anything with a serious answer is a crown jewel.
Where should it live?
Not in the same place as everyday work. Crown-jewel data belongs in a vault with narrow access and protection applied to the data itself.
Every Citadel subscription protects more than storage.
Citadel is priced for the people who use it and the work they do. The service connects identity, networking, transport, protected data, recovery and business continuity in one architecture.
Identity
Quantum-Secure® authentication designed to reduce dependence on traditional key-based access.
Network
Quantum-Secure® private networking extends protection beyond the storage environment.
Transport
ParticleMesh™ protects data as it moves between people, applications, clouds and infrastructure.
Data
Secured2 protection is applied to the data itself, beyond conventional encryption at rest.
Resilience
Multi-location redundancy, recovery and business continuity reduce dependence on any single system.
Risk
Eligible deployments can include contractual cyber-risk indemnification backed by a Lloyd's of London insurance policy.*
* Insurance, indemnification, coverage limits, exclusions, eligibility and availability are subject to the applicable policy and contractual terms.
The usual crown jewels.
Intellectual property and designs. M&A and deal material. Board minutes and papers. Source code and build secrets. Credentials and private keys, including bitcoin and other digital asset keys. Financial records and forecasts. Legal files and privileged correspondence. AI models and proprietary training data. Customer and patient information. Executive and family records.
Most organisations find the list is surprisingly short — a few hundred files that carry most of the risk.
A three-step programme.
First, inventory: name the files and the owner of each. Second, separate: move them out of collaboration platforms into a vault where nothing is shared by default. Third, verify: confirm retrieval works and integrity is proven, then review the inventory each quarter.
This is a project measured in days, not quarters, and it removes more risk than most multi-year initiatives.
A crown-jewel inventory checklist
- Intellectual property, designs and research
- Board papers, minutes and strategic plans
- M&A, valuation and deal documents
- Source code, build secrets and infrastructure credentials
- Private keys, wallet backups and recovery phrases
- Financial records, forecasts and audit files
- Legal matters and privileged correspondence
- AI models, weights and proprietary training data
- Customer, patient and employee records
Questions people ask
- How much crown-jewel data does a typical organisation have?
- Usually a tiny fraction of total storage. That is what makes separating it practical.
- Should private keys really be stored in the cloud?
- Key material should never sit in an ordinary shared drive. A vault with no sharing surface and no single readable copy is a far better home than a folder in a collaboration platform.
- Who should own the inventory?
- Usually the CISO or general counsel, with named owners per category and a quarterly review.
Keep reading
Protect what matters most.
Citadel is accepted by a limited number of organisations each quarter. See the plans and start with the data you cannot afford to lose.