Method and system for managing information associated with sensitive information in an enterprise

摘要

The present invention provides a method and system for providing a view of sensitive information across an enterprise. The method includes finding locations of data stores across the enterprise and thereafter searching for sensitive information within the data stores, based on policies. Upon identifying the sensitive information, the sensitive information is optionally quarantined, masked, or encrypted, again based on policies. Information about the locations of the data stores, the sensitive information associated with the data stores, and the masking steps taken, is saved in a repository, and can be tagged. A user may then query the repository to retrieve one or more views of the sensitive information, gaining an overview of the compliance posture of the enterprise relative to one or more data compliance regulations, and for potential data exposure risk areas be able to drill down for actionable level of details.

主权项

1. A system for displaying an aggregate view of data security across an enterprise, the system comprising:
a plurality of data stores, wherein each of the plurality of the data stores is configured to store information associated with the enterprise; a secure reporting database configured to store locations of the plurality of the data stores within the enterprise, an address of each identified sensitive datum within each of the plurality of the data stores, and security attributes of the each identified sensitive datum with respect to the stored locations and the stored address of the each identified sensitive datum; and a dashboard configured to display the aggregate view of the data security across the enterprise to a user in response to a query of the stored locations, the stored address, and the stored security attributes in the secure reporting database.