The security in your data projects

1. ( Big ) Data Management
Security
Global Concepts in 5 slides
2016
Nicolas SARRAMAGNA
https://fr.linkedin.com/pub/nicolas-sarramagna/19/941/587

2. CONTENTS
 Introduction
 What
 Why
 How

3. COMPAGNIE PLASTIC OMNIUM
CONFIDENTIAL
Security in Data Management 3
 DATA MANAGEMENT
 Multiples modules
 BIG DATA
 Velocity, Volume, Variety, Veracity, Value
Collect
Storage
Data Mining /
Machine Learning
Data Viz
Governance
Security
Master Data
Data quality

4. COMPAGNIE PLASTIC OMNIUM
CONFIDENTIAL
Security – What 4
 SECURITY IN DATA MANAGEMENT IS TALKING ABOUT SECURITY IN GENERAL
 INTEGRITY
 RDBMS, HDFS, NoSql
 CONFIDENTIALITY
 Roles management, encrypted data, ACLs
 AUTHENTICATION
 LDAPS, HTTPS, SSH, Kerberos
 NON REPUDIATION
 Logs, Audit traces
 DISPONIBILITY
 Performance, monitoring, clustering

5. COMPAGNIE PLASTIC OMNIUM
CONFIDENTIAL
Security – Why 5
 AVOID DATA LEAKS
 AVOID DATA LOSS
 BUSINESS REQUIREMENTS
 LEGAL / CNIL REQUIREMENTS

6. COMPAGNIE PLASTIC OMNIUM
CONFIDENTIAL
Security – How 6
 SECURITY ON EACH MODULE
 Define the right level of security
 PEOPLE, SEPARATION OF DUTIES
 technical administrators without standalone access to the business data
 ACTIVE AUDIT AND LOG MANAGEMENT,
 ENCRYPTED DATA AND NETWORK
 CENTRAL REPORTING AND MONITORING
 GOVERNANCE OF THE PEOPLE AND PROCESSES
 ANTIVIRUS TOOLS
 ETERNAL AUDIT OF THE SERVICES