DgSecure allows businesses to achieve a 360-degree view of their sensitive data assets across Big Data and traditional data repositories. Security personnel can evaluate their compliance exposure risks and enforce the most appropriate remediation policies to preserve the privacy of their data, whether it resides on premises or in the cloud
The Challenge of Protecting Sensitive Data and Managing Compliance
Social Security Numbers, Credit Card Numbers, and Personal Addresses are just a few examples of sensitive data types that are commonly embedded in Databases, Log Files, or Web feeds and stored in both Big Data and traditional repositories. Each data repository and sensitive data format has unique characteristics, often forcing companies to deploy a number of different technologies to appropriately protect the privacy of their data assets. The use of disjoined security technology increases operational costs, since compliance officers have to spend significant time and efforts to manually merge and cross reference different reports to maintain compliance. Industry regulations and corporate policies require that companies maintain a coherent picture of where their sensitive data is, and ensure security policies are consistently enforced across their entire business.
DgSecure: One Solution to Protect Big Data and Traditional Data
Dataguise DgSecure detects sensitive data in Hadoop, DBMSs, Microsoft SharePoint servers, or in file systems and protects data privacy with a choice of appropriate remediation techniques, such as masking, encryption, and quarantine.
Whether sensitive data is embedded in structured, semi-structured or unstructured data containers, DgSecure provides a straightforward and effective protection for a wide variety of data types stored in both new and traditional data repositories. With DgSecure, security and IT managers can use one solution to define compliance policies, obtain complete view of the company’s sensitive data assets, and enforce the appropriate remediation actions, improving efficiency and lowering compliance costs.
DgSecure offers a control center console from which authorized users define security policies, launch data discovery and data remediation tasks, and analyze reports to assess their compliance exposure. Within the console, authorized users can define custom sensitive data types that are specific to their business, or leverage preconfigured data types defined by industry regulations such as PCI, PII or HIPAA. They can then create policies that define how each data type has to be protected and leverage real-time compliance intelligence to complete risk assessments. DgSecure repository-specific modules, DG for Hadoop, DG for DBMS, DG for SharePoint, and DG for Files, physically implement the sensitive data detection and protection functions according to policies centrally defined in DgSecure. Through DgSecure console, authorized personnel can instruct these modules to locate and identify sensitive data, enforce remediation policies, and monitor the results of these actions.
DgSecure: Flexible to Adapt to Business Needs
Companies have different priorities and DgSecure gives them the choice to tailor their compliance strategies to their business needs. DgSecure can be deployed incrementally and operate on one repository, or across different repositories. Security personnel can choose to apply different remediation policies depending on user needs. As an example, for data stored in Hadoop, businesses can choose to either mask or encrypt sensitive data. Masking replaces sensitive data with other realistic data of the same kind. This technique is useful when the data can be changed without compromising the scope of analysis performed on it. In situations in which authorized users need to access the actual sensitive data for their analysis, encryption is the preferred data protection technique. Encryption makes data unreadable for all users but the ones granted a decryption key. Finally, DgSecure allows businesses to simply inspect their data to collect compliance intelligence or to also define and enforce remediation policies.
The DgSecure product line includes the following modules: