Transcript
My name is Teresa Miller, Senior Director of Technical Marketing here at Cohesity. Consider this, enterprise data security leaders have many challenges, but the largest is really about understanding where all of that sensitive data across your data sets is. For example, PII, financial data, IP, they live across all of your environment's data. And in order to secure it, you must be able to find it before an issue occurs. Then if something does happen, you must be able to quickly determine what was exposed. Whether it's prevention or response, everything comes back to having the right visibility to reduce the serious risk of breaches and compliance failures. When it comes to your backups, many organizations are telling us that they're not accounting for their sensitive data such as PII, PHI, or PCI. This data might be lurking unmonitored in the backups. Now with what I'm going to show you today, we're going to have the ability to address this blind spot. Plus, in the Cohesity DSPM dashboard, we get a quick overview of objects by data sensitivity distribution and a quick understanding of whether or not there's any Active Directory ghost data listed by sensitivity that we need to respond to. Another critical element that we offer within our tooling is data aware resiliency. Data aware resiliency is where DSPM insights translate into automated data aware protection at scale. We allow you to use playbooks. Go ahead and edit this one in particular so you can see how it was set up. But you're using a playbook to define the protection policy based on the sensitivity and category. So if we take a look, we have a playbook here that will protect the data if the sensitive tag is restricted and classification tag is financial. I then have the ability to choose the policy that this will run against. I'm using my daily and then enable it. As you can see, this is already enabled, so I'm going to go ahead and cancel. Another great feature that we offer is the ability to do rule blocking. Let me explain further as I navigate here into rules. So from a rule blocking perspective, you have the ability to prevent recovery and even backup of data when cross region violations occur. This is also a powerful capability, and we're going to take a close look at this next. So now imagine this as a member of our compliance team in charge of company's governance, such as Azure Blob, M365, VMware, and even AWS3, it's going to be critical to make sure that our data being stored is in the right place and if any PII exists where it shouldn't. Today we're going to go ahead and focus on some S3 data. As I navigate, you're going to see a couple of different things happening here. So one, of course, we're navigating to our S3 data. But I want you to consider the whole point of this is ensuring that our data is properly classified and tagged if there are any violations that exist. So I browsed through my source, and for supported adapters, I can actually see that I have some security violations and some DSPM tags. Now let's go ahead and click on these security violations to get more details. We can see a few things going on. I have an organizational issue where an inactive entity is referencing data that's no longer in use. I have a third party issue where there's an external AWS account that's not being monitored. We have a data sprawl problem. European personal data is being stored within this particular bucket, which is outside of Europe. So this is a potential issue. And then the last one I have here is data sprawl where there's some potential credit card numbers being listed in plain text. Now what you're getting here is some granular visibility into what's going on within this S3 bucket. I can navigate a little bit deeper to see some additional insights into the data types that are being potentially exposed, including the data classes below. So upon review, the most critical item for us to respond to was the GDPR security violation. And I mentioned we turned on the rule for that earlier. So that's where this is going to really start showing through. So since we created that policy earlier to warn when a European citizen's data is being stored in the wrong backup location, I want to go a step further and show you what happens when I try to recover that data. So I've clicked on recover. And that cross region violation does occur. I'm going to go ahead and cancel. Now beyond recovery, this also works from a protection perspective. So if I come in here and start looking for a system that I know shows up referring to as COH Frankfurt. Now this one in particular is not protected. I can see there's some data violations here, but I haven't investigated them quite further. I'm going to just go ahead and try and protect this machine. So what we're going to quickly see here is that we also have that cross region violation of data. And if I were to go back here, if I had taken the time ahead of time, yep, we can see that there's a problem. Now, what if we need more detailed information about the violations and tags? Well, there's another way to navigate this. I'm going to head over here to the security center, and I'm going to go into inventory view. Let's go ahead and continue to search for similar data. We're going to stick with the JWS bucket that we've been working with today. And this not only gives us insights into that particular bucket that we've been working with, but there are some other assets that start with or include JW that we can do some digging around and get some insights into seeing. One other important piece to understand about this view is that it's also correlating all the different signals, not only from the Cohesity side, but from the Sayera side. So we can get that nice overview at a glance. Now, what if I needed from here to just go ahead and get some more insights into those signals? I can go ahead and click. And if I head over here to the data insights, Sayera, I can see very similar to what we observed before. We have these data classes and details right at our fingertips. So to wrap things up today, if you are facing similar challenges securing sensitive data, now is the time to act. Securing data starts with understanding your sensitive data with speed, precision, and at scale. And we can help you protect what matters most.
