The global data footprint is growing at an unprecedented rate, with business users creating and sharing information in new ways. Identifying your sensitive data within this vast cauldron of information is imperative, but relying solely on your users to do so might not be enough. The question is: how can you effectively balance involving your users in data identification with automation?
Sensitive information such as PII, PHI, PCI and ITAR data doesn’t always require user involvement to be identified and classified. Additionally, if your organization has defined terminology which refers to your Intellectual Property, you may not require user-driven classification to identify it. The enhanced automated classification capabilities of TITUS Classification Suite 4.4 – available now – will enable your policies to be applied behind the scenes.
TITUS Classification Suite 4.4 can patrol folders and apply the appropriate classification as files are saved to, moved to, or modified within them. For example, you may choose to classify all reports downloaded from Salesforce as ‘Restricted’, all files containing credit cards or social security numbers as ‘Internal’, or any document containing the term “Sales Goals” as ‘Confidential’. You may also have certain file types which generally contain IP, and opt to classify all CAD, Visio, or MS Project files as ‘Internal’. Just as is the case with user-defined classification, TITUS enforces security policies to prevent users from disclosing or mishandling this sensitive information.
Also, users are not only working with files on premise anymore. What about cloud storage? With integration to Box, Dropbox and OneDrive, Microsoft Office files can be classified prior to being uploaded to the cloud. Upon upload, the contents of the file are analyzed, its sensitivity determined, and the file is uploaded with the appropriate classification and, if required, encryption. Conversely, if the file contains information deemed by the organization to be unsuitable for cloud collaboration, the upload can be blocked. TITUS Classification also integrates with CASBs to further protect your cloud data.
Certainly, there are still times when user involvement is required, with the most obvious example being complex information related to intellectual property. Who better than your users to bring an intelligent perspective to your sensitive information? While automation can catch a lot, you also want to arm your users with the tools they need to appropriately classify the information that automation might not comprehend, and nobody makes that as easy as TITUS.
There is no one size fits all approach. Given that requirements vary across the organization, and that even the most advanced algorithm might miss some nuanced data sensitivity, it is best practice to deploy a combination of user-driven, system suggested and automated classification. TITUS Classification Suite 4.4 allows your organization to do just that.