an introduction to data classification€¦ · data classification is the process of sorting and...
TRANSCRIPT
![Page 1: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/1.jpg)
An Introduction to Data Classification Finding the Important Stuff
David Bullas, Senior Technical Specialist
![Page 2: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/2.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 2
Agenda
• Introduction
• Why classify data?
• Common Compliance Regulations
• How does it work?
• What next?
![Page 3: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/3.jpg)
3
Introduction
![Page 4: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/4.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 4 Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 4
Data classification is the process of sorting and
categorizing data into various types, forms or any other
distinct class. Data classification enables the
separation and classification of data according to data
set requirements for various business or personal
objectives. It is mainly a data management process.
- Techopedia
![Page 5: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/5.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 5
What does that mean?
Identify where sensitive
information is
Understand your Rules
Put that data in the right place Repeat
![Page 6: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/6.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 6
Common Terms
• Classification
• Sensitive Data
• PII
• Compliance
• Governance
![Page 7: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/7.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 7
Classification: The process of separating data
![Page 8: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/8.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 8
Sensitive Data: Information protected against unwarranted exposure
Examples:
• Credit Cards
• Medical Records
• Home Phone Numbers
• Email Addresses
• Minister Memos
• Project Status Updates
![Page 9: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/9.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 9
PII: Personally Identifiable Information
![Page 10: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/10.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 10
Compliance: ?
We could talk about this one all day…
But basically: Making sure the right people are following the right procedures, especially in protecting data
![Page 11: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/11.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 11
Governance: Establishment of policies to achieve proper compliance
![Page 12: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/12.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 12
Governance is also…
… the piece that nobody wants to look at until something goes wrong, and then it’s scrutinized within an inch of its life.
So you need to make sure it’s tight in the good times to protect you in the bad.
![Page 13: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/13.jpg)
13
Why classify data?
![Page 14: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/14.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 14
There are lots of files out there
![Page 15: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/15.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 15
Only some of them matter
![Page 16: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/16.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 16
But they aren’t always easy to find
![Page 17: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/17.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 17 Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 17
From the time information is created until it
is destroyed, it should be labeled with a
classification designation to ensure it is
protected, stored and managed
appropriately. ”
Brian Evans, Tom Walsh Consulting
![Page 18: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/18.jpg)
18
Common Regulations that
require Data Classification
![Page 19: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/19.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 19
Compliance Regulations: PIPEDA
Personal Information Protection and Electronic Documents Act (PIPEDA)
Sets the ground rules for how private-sector organizations collect, use, and disclose personal information in the course of for-profit, commercial activities across Canada.
It also applies to the personal information of employees of federally-regulated businesses such as banks, airlines, telecommunications companies
![Page 20: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/20.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 20
Compliance Regulations: The Privacy Act
Relates to a person’s right to access and correct personal information that the Government of Canada holds about them.
Also applies to the Government’s collection, use and disclosure of personal information
![Page 21: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/21.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 21
Compliance Regulations: The Federal Banking Act
Regulates the use and disclosure of personal financial information by federally regulated financial institutions.
![Page 22: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/22.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 22
Compliance Retulations: PCI DSS
The Payment Card Industry Data Security Standard (PCI DSS) is an information security standard for organizations that handle credit cards.
![Page 23: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/23.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 23
Compliance Regulations: GDPR
The General Data Protection Regulation (GDPR) is a legal framework that sets guidelines for the collection and processing of personal information of individuals within the European Union (EU).
![Page 24: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/24.jpg)
24
How Data Classification
Works
![Page 25: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/25.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 25
Data Classification Steps
Define Policy Configure your rules Search
Define Policy
Choose the right
approach
Configure your rules
Search
![Page 26: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/26.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 26
Defining Policy
![Page 27: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/27.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 27
Defining Policy
Enumerate the types of data that matter to your business - Compliance Data - Project Proposals - Employee Reviews - CAD Drawings
You don’t have to know it all to start!
![Page 28: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/28.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 28
Decide on your approach
Manual Behaviour Content Analysis
![Page 29: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/29.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 29
1. Manual
• This is the “do it yourself” option.
• Get the users to classify their own files
• Checks the checkbox for classification policies
• Relies on your knowledge of your data and the rules
![Page 30: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/30.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 30
Is it or Isn’t it?
4111 1111 1111 1111
![Page 31: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/31.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 31
Is it or Isn’t it?
4111 1111 1111 1111 YES!
![Page 32: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/32.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 32
Is it or Isn’t it?
4111 1111 1111 1111 YES!
4111-1111-1111-1111
![Page 33: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/33.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 33
Is it or Isn’t it?
4111 1111 1111 1111 YES!
4111-1111-1111-1111 YES!
![Page 34: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/34.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 34
Is it or Isn’t it?
4111 1111 1111 1111 YES!
4111-1111-1111-1111 YES!
4111.1111.1111.1111
![Page 35: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/35.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 35
Is it or Isn’t it?
4111 1111 1111 1111 YES!
4111-1111-1111-1111 YES!
4111.1111.1111.1111 YES!
![Page 36: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/36.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 36
Is it or Isn’t it?
4111 1111 1111 1111 YES!
4111-1111-1111-1111 YES!
4111.1111.1111.1111 YES!
4111111111111111
![Page 37: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/37.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 37
Is it or Isn’t it?
4111 1111 1111 1111 YES!
4111-1111-1111-1111 YES!
4111.1111.1111.1111 YES!
4111111111111111 MAYBE?
![Page 38: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/38.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 38
Is it or Isn’t it?
4111 1111 1111 1111 YES!
4111-1111-1111-1111 YES!
4111.1111.1111.1111 YES!
4111111111111111 MAYBE?
4111 1111 1111 1112
![Page 39: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/39.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 39
Is it or Isn’t it?
4111 1111 1111 1111 YES!
4111-1111-1111-1111 YES!
4111.1111.1111.1111 YES!
4111111111111111 MAYBE?
4111 1111 1111 1112 NO!
![Page 40: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/40.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 40
2. Automated Content Analysis
• Software-driven search for specific content or file attribute
• Relies on rules that look for 1. Keywords 2. Patterns 3. Regular Expressions 4. File Name, Size, Extension
• Relies on regular review and rule refinement
![Page 41: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/41.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 41
3. Behaviour
• Search for sensitive content based on who is accessing it: I. If more than 75% of users are
members of the Finance department, classify the file as a finance file
II. If more than 90% of users are members of the AD group HR, classify the file as an HR file
• Relies on identity information and activity data
![Page 42: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/42.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 42
Define Rules
Image: https://xkcd.com/208/
![Page 43: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/43.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 43
Define Rules
• Be specific (we don’t want a lot of rework from false positives!)
• Combine terms together
• Use automatic validation (Luhn, Area Codes, Expert Knowledge) where you can
• Refine, Refine, Refine
• This is kind of like the “search” part of “search and replace”
Find the word “he”, change it to “she”
Simple – but be careful that you don’t change “the” to “tshe”
![Page 44: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/44.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 44
Search!
Image: http://www.iconarchive.com/show/I-like-buttons-3a-icons-by-mazenl77/Perspective-Button-Search-icon.html
![Page 45: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/45.jpg)
45
Now what? Govern!
![Page 46: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/46.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 46
Comprehensive Identity Governance Protect access to all applications and data – on-premises and in the cloud
Applications & Systems
Data stored in files
• Greater visibility into access risks • Centralize all access to applications and data • Reduced complexity by providing a consistent set of controls
Benefits
Access Request
Access Certification
Provisioning Workflow
Access Policies
User Risk-based Modeling
Password Management
Data Classification
Activity Monitoring
Permission Analysis
![Page 47: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/47.jpg)
Copyright © SailPoint Technologies, Inc. 2016. All rights reserved. 47
One Identity, all data Complete Security Visibility
For each identity, get complete coverage of their structured and unstructured data access
Accounts with access to sensitive data are tagged with a red-letter “S”
![Page 48: An Introduction to Data Classification€¦ · Data classification is the process of sorting and categorizing data into various types, forms or any other distinct class. Data classification](https://reader034.vdocuments.net/reader034/viewer/2022050209/5f5bee475b2fd67c8878bf9d/html5/thumbnails/48.jpg)
Thank You