Highlights
We successfully executed a data governance project in the financial and banking sector, utilizing SyberGRC, an advanced data scanning product. Our implementation involved scanning diverse file types to identify and manage privacy data across 140 machines. As system integrators and application integrators, we played a pivotal role in implementing the solution and providing ongoing support to ensure seamless operation and compliance with industry standards.
Executive Summary
A leading Indian Public Sector Undertaking (PSU) Bank, for its Chicago branch, engaged Avancer Corporation to conduct a Data Assessment and Scan on assigned hosts/machines containing sensitive information to investigate the entire universe of their data.
Data Scanning: Identify confidential data that includes PII, PHI, PCI, and other business confidential data stored in laptops and desktops.
Data Remediation: Action plan to protect data from exfiltration
CHALLENGES
- Identify confidential data that includes PII, PHI, PCI, and other business confidential data stored in laptops and desktops.
- The high-level scope involves performing secure scans across various file types, conducting in-depth data analysis, and providing a comprehensive recommendation plan to enhance data security.
BENEFITS
- Ability to identify critical or sensitive customer data, limit access to PII, and regularly detect duplicate and stale data.
- Implement data classification techniques by applying metadata tags, eliminating stale data, integrating with DLP policies, and enforcing daily data access controls.
- Discover and eliminate stale or redundant data, integrate classification into DLP and other policy-enforcing applications, and implement data access controls regulating users access to data daily.
- Enable metadata tagging to optimize business activities, inform on data location and usage, and uncover trends.
KEY TECHNOLOGIES
- SyberGRC Data Scan, Active Directory, SAN storage, laptops/servers
AVANCER’S SOLUTION
- Deployed advance scan product for L1 file type and L2 data scanner.
- Simply identify data stored across the environment.
- Continuously reapply privacy metrics based on the sensitivity of collected and identified data.
- Generate automated system reports that display additional confidential data in the environment.
- Strategic recommendations to secure data.