Varonis Data Governance Suite

Unstructured Data Quantities – Present and Future © 2010 Varonis Systems. Proprietary and confidential. Unstructured and semi-structured data is exploding... Source: Gartner Jan 2010 650% growth over the next 5 years 80% of all data is unstructured or semi-structured

Data Explosion – Are We Ready?
91% lack processes for determining data ownership
76% unable to determine who can access unstructured data
© 2010 Varonis Systems. Proprietary and confidential. Page Data Collaboration Cross-Functional Teams + Security Requirements More Containers More ACLs More Management Source: Ponemon Institute
Can IT answer:
Who has access to this folder?
Which folders does this user or group have access to?
Who has been accessing this folder?
Which data is sensitive?
Who is the data owner?
Where is my sensitive data overexposed?
How do I fix it?
Where do I begin?
---------More---------

Varonis IDU Framework – Foundation for Data Governance
Four types of metadata are collected, synthesized, processed, and presented:
Permissions information
User and Group Information
Access Activity
Sensitive Content Indicators
Actionable data governance information is presented:
Who has access to a data set?
Who has been accessing it?
Which data is sensitive?
Who is the data owner?
Where is my sensitive data overexposed, and how do I fix it?
Allows data owners to participate in data governance:
Automated Entitlement reviews
Authorization workflows
© 2010 Varonis Systems. Proprietary and confidential. Page

Varonis Data Governance Framework Components © 2010 Varonis Systems. Proprietary and confidential. The Varonis IDU Framework creates and manages a meta-data layer that enables IT and the business to work together to protect unstructured data IDU Retention/Storage Analysis & Modeling Aggregation & Normalization File System Meta Data Collection User Data Collection Commit Changes to File Systems and Directory Services DatAdvantage DataPrivilege Windows File Systems UNIX/ Linux SharePoint MS Active Directory LDAP NIS Local Accounts Data Content Classification Presentation NAS Access Activity Future FUTURE

Unstructured Data – Operational Challenges
As employee needs change, authorizations grow & grow
Permissions are seldom revoked
Tools are mostly manual: time consuming and error prone
Ensuring authorizations are based on business need
Metadata and folder location don’t reveal ownership
Time consuming and manual process to find owners
Significant amounts “orphan” data–unknown business context or relevance, wasted storage
© 2010 Varonis Systems. Proprietary and confidential. Identifying data business owners
Native auditing impairs server performance, generates large volumes of difficult to decipher data
Audit trail often enabled only after incident has occurred
Most lack any audit information
Understanding who accessed data & how
Searching through so much data takes a lot of time
Data constantly changes – hard to keep current
Results provide only the first step in the data’s protection
Finding/classifying sensitive content

Risks, Controls & Regulations
High Risk Levels
File System data is at great risk for loss, theft, and misuse
Access configuration changes are untested
File System Controls Gaps
Many access controls are “loose,” even broken
No audit trail exists
>50% of data has no known business owner
Regulatory Requirements
HIPAA
CMS
Sarbanes Oxley
© 2010 Varonis Systems. Proprietary and confidential. Page

Varonis Solution
Technological Breakthrough
Automatically Identify and Remediate Access Control Gaps
Provide a Usable Audit Trail of Data Usage
Identify Data Owners, Inactive Data, Sensitive Content
Automate and Enforce Access Control Processes
Efficient, Effective Risk Reduction
IT Data Protection Jumpstart
Proven Operational Execution
>600 customers
All Verticals

Common Use Cases for Varonis
Access Control Cleanup – Identify & Remediate:
“ Global” Groups -(everyone, authenticated users, etc)
Redundant, Excessive Group Memberships
Orphaned SID’s, Individual User SIDS on ACL’s
Find Lost & Deleted Files
Identify Anomalous Behavior
Track Permissions & Group Changes
Ongoing Entitlement Reviews
Automate Access Authorization & Revocation
Identify Inappropriate File Activity (mp3’s, etc.)
Enhance Other Data Protection Projects
© 2010 Varonis Systems. Proprietary and confidential.

Common Use Cases for Varonis (cont’d)
Efficient audit compliance - provide evidence of:
Effective permissions (preventive controls)
Usable audit trail (detective controls)
Authorization processes
Compliance with authorization processes
SharePoint Migration
Stale Data Identification
Data Owner Identification
© 2010 Varonis Systems. Proprietary and confidential.

http://www.varonis.com	2270
http://www.marathon-its.com	298
http://www.slideshare.net	19
http://varonis.com	12
http://www-stage.varonis.com	10
http://www.isecurellc.net	4
http://wwwprod.varonis.com	1
http://www.integranetllc.com	1
http://wwwstage.varonis.com	1
http://www.blogger.com	1

Varonis Data Governance Suite

by Varonis

Accessibility

Categories

Upload Details

Usage Rights

10 Embeds 2,617

Statistics

Varonis Data Governance Suite Presentation Transcript