Information is currency in the 21st century...Is your data enabling you to drive the right digital transformation in your organisation? - Jasmit Sagoo, CTO, Veritas

1. Is your data enabling you to drive
the right digital transformation in
your organisation?
Jasmit Sagoo

3. 3
33%
52%Dark
Data
ROT
15%Clean
The People
Global Databerg Report
The Data
Data Genomics Index
KeyVeritas research shows the DATA problem
The Reality
The Data Hoarding Report

4. HarnessingValue is Complicated… Because Data is Everywhere!
4

5. Guiding Principles & Considerations
5
Cross-functional team trained
in security, privacy and
compliance to remediate both
IT and business-managed
technology gaps
Lead with Policy and
Process. Reuse across
systems to solve once for
multiple gaps
Timing for Systems
Remediation must integrate
into the FY18 IT POR
Highlight effective use of
Veritas Products to
ensure compliance
Comply by May 2018 Risk-based Prioritization

6. 4 Steps to Information Governance
6
1
2
3
4
Create and apply retention policies; the same for Structured andUnstructured Personal Data
FINDAND ORGANISEYOUR PERSONAL DATALOCATE & MINIMISE
SEARCH
MONITOR
PROTECT
Find personal data quickly enough to meet the time limits for data subject requests, such as the right to
be forgotten (If you’ve completedStep 1 you’ll have much less data to search)
FIND DATATO BE FORGOTTEN – RESPONDTO SUBJECT ACCESS REQUESTS
Identify data breach within 72 hours and provide an audit trail of usage and movement of data
BE BREACH READY
Protect personal data from loss, damage, destruction and unlawful or unauthorized processing
(Back-up & Recovery, Archiving and Resiliency)
PROTECTWHATYOU KEEP
0 ENABLEMENT &
GOVERNANCE Create an organisation which promotes governance, provides leadership and drives Policy
EDUCATE LEADERSHIP, CREATE CORPORATE STRUCTURE

7. GDPR Program Structure for IT
7
Application
Remediation Structured
Data
Application
Remediation Un-
Structured Data
3rd Party Risk
Management
IT/Security Governance,
Risk and Compliance

8. Application Remediation – Unstructured Data
8
File/Print Servers
SharePoint
OneDrive
Email
280
TB of data
+
End user
device data
DataVisibility Data Retention
Discovery &
Response
Data Protection
NA

9. GDPR - ClassificationValidation Results
9
Personal Data (Employee,Customer, Supplier)
Data Points # Files
Total Files Scanned 9 Million
PII Hits - # Files 16,256
PII FilesAudited 3,311 (20%)
PII Confirmed Hits 3280 (99%)
False Positives 31 (<1%)
Files accessed in last 2 years 315,000 (3.5%)
Other Risks 186K db dumps

10. Most organizations are
here
Information Risk Management Maturity
StageTwo
Repeatable but
intuitiveStage One:
Initial/ad hoc
Stage Zero
Non existent
StageThree
Managed &
measurable
Stage Four
Optimized

11. VISIBILITY
Expose Risk
ACTION
Execute Decisions
CONTROL
Enforce Governance

12. Bringing ItTogether - Governing Data
12
MONITOR LOCATE
PROTECT SEARCH
MINIMIZE
PERSONAL
DATA
Uncover Personal Data
and make it visible
Article 30
What information are you
collecting and where is it
stored?
Make Personal Data
searchable
Articles 15, 16, 17, 18, 20
Subject access request
Intelligence & Indexing
Minimise and place controls
around Personal Data
Articles 5, 17, 32
Collection, Retention & Disposal
Protect Personal Data
from loss, damage or
breach
Articles 5, 25, 32, 33, 34
Data Protection
Ensure continual
adherence to GDPR
standards
Articles 5, 15, 16, 17, 18, 20,
24, 42, 44
Access controls

13. Information
Map
Data
Insight
Enterprise
Vault
eDiscovery
Platform
Enterprise
Vault.cloud
Veritas Information Classifier

14. Copyright © 2017 Veritas Technologies.14

15. Copyright © 2017 Veritas Technologies.15
Data Discovery and Minimisation
Problem: You don’t know exactly what data you are holding
Action: Understand what data you store today, where it is, and what it contains

16. LOCATE
Where is our data?

17. LOCATE
Who owns the data?

18. LOCATE
What data is it?

19. LOCATE
Identify Stale and
Orphaned data

20. MONITOR
Data Insight™
Define Personal Data
policies

21. Data Insight™

22. Data Insight™

23. MINIMISE
Archive Email, Files,
PST/ NSF to reduce
risk of hidden
personal data

24. MINIMISE
Fully audited GDPR
compliant store

25. Copyright © 2017 Veritas Technologies.25
Search
Problem: Your process for DSAR response is difficult, manual and slow
Action: Hit my 1 month timeframe for data subject access requests (DSAR’s)

26. SEARCH
Search data by custodian
or classification tag

27. Use Machine Learning to
accelerate analysis and
review

28. Copyright © 2017 Veritas Technologies.28
Monitor
Problem: You have no early warning of suspicious insider behaviour
Action: Ensure I am on top of behaviour that could be an early sign of risk

29. MONITORDetect Anomalies in user
behavior
Data Insight™

30. MONITOR
Detect, alert and prevent
insider threat
Data Insight™

31. Next STEPS
1
2
3
GDPR Show and Tell
How Veritas can help you solve the challenges
How our products map to the GDPR framework
Veritas Risk Analyzer
GDPR Workshop
The Veritas view of the regulation
Critical first steps to GDPR compliance
GDPR Assessment
Veritas assessment to understand maturity
Leverage our tools to identify areas of personal data
Recommendations and Plan of Action
Help define and scope project

32. When digital compliance is done right, it’s like a
caterpillar turning into a butterfly, but when
done wrong, all you have is a really fast
caterpillar.”
GeorgeWesterman
Principal Research Scientist
MIT Sloan Initiative on the Digital Economy
32