Data protection and application security is important to enterprise in order to protect its data or information privacy so that we can avoid the risk of losses or hacking of the data. Data protection is a global issue to every enterprise since the advanced technology improvement nowadays. For a smart business enterprise, the general security includes internet network security, data security, application security and data use security etc. To order to protect the business assets to avoid unwanted uses or sales, the best approach is to set up the risk-based security practice to access the online platforms or public clouds.