A keynote session at Vision Solution Day EMEA on mitigating risks and staying compliant with Chris Bridgland and Alex Brown.

1. Copyright © 2017 Veritas Technologies LLC.1

2. Mitigate risks and stay compliant –
Practical strategies for meeting strict new data
privacy regulations like GDPR
Chris Bridgland
Alex Brown

3. September 2017© 2017 Veritas Technologies LLC3

4. September 2017© 2017 Veritas Technologies LLC4
4540198 08: : :

5. September 2017© 2017 Veritas Technologies LLC5
Me

6. September 2017© 2017 Veritas Technologies LLC6
Where is my Personal Data?

7. September 2017© 2017 Veritas Technologies LLC7
Where is my Personal Data?
1 COLLECTOR

8. September 2017© 2017 Veritas Technologies LLC8
Where is my Personal Data?
1 COLLECTOR
22 PROCESSORS140 PROCESSORS

9. September 2017© 2017 Veritas Technologies LLC9
Where is my Personal Data?
1 COLLECTOR
140 PROCESSORS
PERSONAL LIFE
225 COLLECTORS

10. September 2017© 2017 Veritas Technologies LLC10
Where is my Personal Data?
1 COLLECTOR
140 PROCESSORS
PERSONAL LIFE
225 COLLECTORS

11. ~11,250 PROCESSORS~7,000 SUB-PROCESSORS
September 2017© 2017 Veritas Technologies LLC11
Where is my Personal Data?
1 COLLECTOR
PERSONAL LIFE
225 COLLECTORS

12. September 2017© 2017 Veritas Technologies LLC12
Where is my Personal Data?
Spread across approximately 18,500 organisations across the world

13. 13
Name
Password
Secret Question & Answer
IP address
Download History
Childs First Name
Childs Surname
Childs Gender
…and that’s a problem

14. 14
Name
Email
Mobile Number
Vehicle Registration
Credit Card number & expiry
…and continues to be a problem

15. September 2017© 2017 Veritas Technologies LLC15

16. So what do we need to do about it?
Copyright © 2017 Veritas Technologies16

17. 17
Data
Personal
Data
Protect Data from loss,
damage or breach
Make data and its
contents visible
Make data searchable
Place controls around
Data
Ensure continual
application of controls

18. MappedTasks for Good Governance
ProvideVisibility &Take Mitigating Action Respond to SAR Respond to Breach Backup & Available
Unstructured Data
Disposition
Structured Data
Disposition
Infrastructure Mapping
Application Mapping
Structured Data Mapping
Subject
Access
Request
(SAR)
Process Mapping
Data Access
Monitoring
Data
Protection &
Availability
BC & BU
Strategy
Tech Consulting –
VeritasTraditional
Business Consulting –
Veritas or Partners
Process
Data
Application
Infrastructure

19. Copyright © 2017 Veritas Technologies.19
Setting the scene
You’ve had a potential data breach
Customers are worried – class action incoming
Almost certainly an inside job
The regulators have gotten wind of the breach and are asking difficult questions
WORRISOME

20. Copyright © 2017 Veritas Technologies.20
Data Discovery and Minimisation
You’ve had a potential data breach
Customers are worried – class action incoming
Almost certainly an inside job
Problem: You don’t know exactly what was lost
Action: Understand what data you store today, where it is, and what it contains

21. LOCATE
Where is our data?

22. LOCATE
Who owns the data?

23. LOCATE
What data is it?

24. LOCATE
Identify Stale and
Orphaned data

25. MONITOR
Data Insight™
Define Personal Data
policies

26. MONITOR
Data Insight™
Define Personal Data
policies

27. Perform Content
Classification
Data Insight™

28. Data Insight™
Scan andTag

29. MINIMISE
Archive Email, Files,
PST/ NSF to reduce
risk of hidden
personal data

30. MINIMISE
Perform content
classification
Retention based rules
to discard what you
don’t need

31. MINIMISE
Fully audited GDPR
compliant store

32. Copyright © 2017 Veritas Technologies.32
Search
You’ve had a potential data breach
Customers are worried – class action incoming
Almost certainly an inside job
Problem:Your process for SAR response is difficult, manual and slow
Action: Hit my 30 day timeframe for subject access requests (SAR’s)

33. Search for Personal Data
wherever it resides

34. SEARCH
Search data by custodian
or classification tag

35. Use Machine Learning to
accelerate analysis and
review

36. SEARCHRedact (automatically) when
exporting Subject Access
Request data

37. Copyright © 2017 Veritas Technologies37
Track time elapsed against a
time window

38. Copyright © 2017 Veritas Technologies.38
Monitor
You’ve had a potential data breach
Customers are worried – class action incoming
Almost certainly an inside job
Problem:You had no warning of suspicious insider behaviour prior to the breach
Action: Ensure I am on top of behaviour that could be an early sign of risk

39. Data Insight™
Perform proactive risk
profiling; Users

40. Perform proactive risk
profiling; Resource
Data Insight™

41. MONITOR
Detect Anomalies in user
behavior
Data Insight™

42. MONITOR
Detect, alert and prevent
insider threat
Data Insight™

43. Copyright © 2017 Veritas Technologies.43
Re-Setting the scene
You’ve had a potential data breach
Customers are worried – class action incoming
Almost certainly an inside job
The regulators are satisfied that you have adequate control over the situation
WORRISOME
You know exactly what information was at risk
Your process for SAR response is rapid and automated
You know exactly who stole the data and when
OR you prevented the theft in the first place.

44. Data
Personal
Data
Protect Data from loss,
damage or breach
Make data and its
contents visible
Make data searchable
Place controls around
Data
Ensure continual
application of controls
Tactical wins for meeting strict data privacy regulations

45. Q & AQ & A
Copyright © 2017 Veritas Technologies.

46. Thank you!
Copyright © 2017 Veritas Technologies LLC. All rights reserved. Veritas and the Veritas Logo are trademarks or registered trademarks of Veritas Technologies or its affiliates in
the U.S. and other countries. Other names may be trademarks of their respective owners.
This document is provided for informational purposes only and is not intended as advertising. All warranties relating to the information in this document, either express or
implied, are disclaimed to the maximum extent allowed by law. The information in this document is subject to change without notice.
Chris Bridgland & Alex Brown

47. Copyright © 2017 Veritas Technologies LLC.47

48. Bystander or Participant?
Jacqueline de Rojas
Twitter: @jdR_Tech @veritasTechEMEA #vtasvision
techUK President | Non-Exec | Advisor

49. Data is the
new Electricity
A culture
of data
confidence &
trust
Cyber Attacks:
It’s when, not
if
Trust: Build or
Break your
Brand
Bystander or Participant?
Copyright © 2017 Veritas Technologies LLC.49
Uninterrupted
Data Flows

50. Copyright © 2017 Veritas Technologies LLC.50
Enjoy some networking time!

51. Here’s the truth aboutVeritas
Copyright © 2017 Veritas Technologies LLC.51

53. Copyright © 2017 Veritas Technologies LLC.53
Enjoy some networking time!