Data Classification

Uncovering your critical data involves discovery all your data with an automated, reliable and consistent search and classification tool. Teams of humans are expensive and are not effective at classifying large volumes of documents. Large repositories of documents built up over many years need a fast automated tool. Focus is completely automated and designed to scan and classify multiple millions of documents that may have not been accessed in years.

Rich, consistent tag sets that map to your existing internal confidentiality levels are useful as you can immediately understand the sensitivity of the document and apply the correct procedures. This is a valuable step towards implementing automation for data protection as well and Focus integrates to DLP platforms such as Microsoft Azure Information Protection.

Also, classification that yields useful information such as the last modified date and file size that allows obsolete data to be archived or detected, can identify redundant copies of files, and can link in related facts about the file (such as presence of PII data) make our reports and exported lists immediately useful for remediation of ROT (redundant, obsolete and trivial data).

Lastly, classifications of email to the same tag taxonomy and confidentiality levels allows a unified approach to data protection and we seamlessly classify emails, attachments and standalone files the same way.

Data Governance

Understanding where your most sensitive data resides is key to your security. Employees may store data on their local devices, upload to shadow IT like a personal Dropbox account, email data out outside of the organisation and many more. Getvisibility triages and catalogues your data under your company's taxonomy, and shows the data location.

As the data grows daily, it is hard to keep up to date with your data governance posture. While Getvisibility classifies your data based on its content, we also look inside of the files' metadata to identify your Redundant, Obsolete, and Trivial data. With a single pane of glass, you can see data duplicates, data with no business value, and your old data that has not been touched in a while. Getvisibility provides analytics and insights to what you can do with your data whether to archive, migrate or delete such data.

Monitoring Data Access

Real-time reaction to new data being created, existing data being modified, and irregular activity relating to sensitive documents requires an extension to simple scanning and slow classification. We have extended the Focus platform to respond to new data or modified data events from sources such as file servers and CloudTrail that allow classification of new data in significantly less than 1 second (dependent on the file size). This allows new and recently modified data to fall under the protection of your DLP systems (if present) immediately.

By monitoring such event activity across multiple streams and sources, and crucially, knowing which files contain sensitive data, we have also expanded our system to perform Complex Event Processing (CEP) and User Behaviour Analytics (UBA) with machine learning models to detect anomalous behaviour with low false positive rates. This gives you confidence that the reported incidents are real and remediation can be performed. See the Active Incident graph on the screen to the right.

We can push alerts to external platforms such as Security Incident Event Management (SIEM) systems such as IBM QRadar or Exabeam, push alerts to HTTP(S) endpoints, send emails, or execute external scripts. Handling data access as it happens closes the loop for the Focus platform that is the perfect solution for your unstructured data protection needs.

Enabling Cloud Migration

Cloud migration is challenging due to several factors recognised in a LogicMonitor study call Cloud Vision 2020. These factors are ranked and the top issue is a perception of lower security. We believe this security concern relates to the companies data or intellectual property. So, considering that the cloud infrastructure itself is very secure, the logical assumption is that companies are concerned about leaks of data, or incorrect permissions exposing data to the external world.

As Getvisibility is assisting companies to identify sensitive data, we are also assisting companies to move the critical data to the cloud and understand clearly where the data is, and who has permissions. This greatly eases the security concerns.

Over long periods of time, many companies accumulate large archives of documents on file servers and legacy storage platforms on premise. It is now easier than ever to discover, classify, filter and protect these before migrating.

Getvisibility integrates seamlessly with Microsoft Azure services including Azure Information Protection (AIP) to discover and classify documents, and emails using machine learning. AIP tags are written automatically, protecting your files and enabling the AIP protection with no human intervention.