 | ||
| About Symantec Data Insight | ||
|---|---|---|
| Prev | Overview of this release | Next |
Many organizations struggle with identifying data users and owners for their unstructured data. This challenge is compounded with the fact that organizations lack visibility into the types of content and data that is spread across their computing environment.
With Symantec Data Insight, users can monitor file access to automatically identify the data user of a file based on the access history. This method enables more efficient remediation and data management.
Symantec Data Insight scans the unstructured data systems and collects full access history of users across the data. Symantec Data Insight helps organizations monitor and report on access to sensitive information.
Symantec Data Insight helps the organizations solve the problem of identifying data owners and responsible parties for information in spite of incomplete or inaccurate metadata or tracking information. This helps support large-scale business owner-driven remediation processes and workflows.
Data Insight provides the following information:
Who owns the data
Who is responsible for remediation
Who has seen the data
Who has access to the data
What data is most at-risk
Frequency of usage of data
The ownership and the usage information from Data Insight can be used for the following purposes:
Data owner identification
Data Insight enables rule-based inference of data owners based on actual usage. Data owner information may not reflect the responsible party. The responsible party or data owner can be a line manager in the business unit, the head of a department, or an information security officer. Symantec Data Insight provides the information to tie the most active user of a file to a manager or responsible party for remediation steps.
Data custodian identification
Data Insight enables the assignment of one or more users as custodians of a data repository. Custodian tagging is typically used to determine the person responsible for remediation. The assigned custodian need not have made any accesses on the files and folders. In addition to the physical paths, you can also assign custodians on DFS paths.
Data leak investigation
In the event of a data leak, you may want to know who saw a particular file. On the Symantec Data Insight Management Server, you can view detailed information and an audit history of who accessed the data.
Locate at-risk data
Data Insight enables organizations to find which shares or folders have overly permissive access rights. Organizations can use this data to prioritize risk-reduction efforts such as the discovery of sensitive data or a review of permissions (or access control rights) to limit access to only those individuals who have a business need.
Manage inactive data
Data Insight enables better data governance by letting you archive inactive and orphan data using Symantec Enterprise Vault. Additionally, you can decide to manage the archived data by applying retention rules, deleting the archived data, or by putting legal hold on the archived data.
Provide advanced analytics about activity patterns
Data Insight enables you to analyze the activity on high-risk folders by providing in-depth analysis of usage and collaborative activity. The analysis helps you classify users based on configured attributes to better understand the activity pattern of users in your environment.
Permission recommendations
Data Insight leverages the usage analytics provided by audit logs to provide recommendations for revoking permissions of inactive or disabled users on a path. It also provides recommendations about modifying group membership by removing inactive users or groups. You can then analyze the business impact of applying the recommendations and configure settings to handle the permission changes.
Remediation using the Self-Service Portal
Data owners and custodians can take remediation actions using the Self-Service portal. Custodians can log in to the Self-Service Portal to do the following:
View Data Loss Prevention (DLP) policy violations and remediate DLP incidents using Smart Response rules.
Review permission on resources and make recommendations to allow or revoke user access on resources.
Provide confirmation about whether the custodians indeed own the data resources that are assigned to them.
Raise alerts
You can configure policies to raise alerts when there is anomalous activity on sensitive data.