Jump to content

Solution for Compliance

Logical access control objectives are based on the principal of least privilege; access should be granted to only those resources that are required to perform a user's function. Many audit regulations now focus on proper controls around access and auditing of unstructured data on file systems, Exchange servers, and SharePoint servers.

Start a Free TrialorRequest a Demo

Interested but want to learn more? Register to download our free whitepapers, webinars, and case studies.

Overview

The Challenge

Whether you are seeking to demonstrate compliance with HIPAA, Sarbanes-Oxley (Sox), or PCI, doing an internal audit or a risk assessment, many of the same questions arise.

What is your process to:

  • Authorize and review access?
  • Identify and revoke unwarranted access?
  • Configure and review logical access controls?

How do you ensure:

  • Proper separation of duties?
  • That access to sensitive or regulated data is limited and monitored?

What evidence do you have that these processes are being followed?

The Varonis Solution

The Varonis Data Governance Suite provides a comprehensive, automated solution to address these compliance questions and challenges, providing a framework to identify and remediate excess access, monitor access activity, identify inappropriate data usage, enforce separation of duties (ethical walls), automate access authorization and entitlement review processes, and provide evidence that these processes are being followed.

Metadata Streams

Four types of metadata are critical for data governance

  • User and Group Information - from Active Directory, LDAP, NIS, SharePoint, etc.
  • Permissions information - knowing who can access what data in which containers
  • Access Activity - knowing which users do access what data, when and what they've done
  • Sensitive Content Indicators - knowing which files contain items of sensitivity and importance, and where they reside

Varonis Metadata Image

Why Varonis

Data protection is necessary to safeguard an organization's customers, employees, business partners, and investors. It is fundamental in securing an organization's intellectual property and competitive edge, and for maintaining the organizational trust required for it to properly function. Ongoing, scalable data protection and management require technology designed to handle an ever-increasing volume and complexity—a metadata framework.

The Varonis Metadata Framework™ non-intrusively collects this critical metadata, generates metadata where existing metadata is lacking (e.g. its file system filters and content inspection technologies), pre-processes it, normalizes it, analyzes it, stores it, and presents it to IT administrators in an interactive, dynamic interface. Once data owners are identified, they are empowered to make informed authorization and permissions maintenance decisions through a configurable web-based interface—that are then executed—with no IT overhead or manual backend processes.

Resources

30-Day Trial

Our 30-Day Free Trial provides a full audit of your file system or your SharePoint environment. Audit permissions, auditing access, usage statistics, recommendations, impact analysis, and identification of business owners.

Within hours of installation

You can instantly conduct a permissions audit: File and folder access permissions and how those map to specific users and groups. You can even generate reports.

Within a day of installation

Varonis® DatAdvantage® will begin to show you which users are accessing the data, and how.

Within 3 weeks of installation

Varonis® DatAdvantage® will actually make highly reliable recommendations about how to limit access to files and folders to just those users who need it for their jobs.

Get the Varonis View. Sign up for the 30-Day Free Trial.

Inside the seedy underworld of spammers and phishers ‹ The Mailgun Blog http://t.co/qNMNBlROQ4