Hi I’m Bruce Stanley your Frugal Tech. I wanted to talk to you to ask you a question. How do you keep your valuable data, your documents, your spreadsheets, your costumer list, how do you keep that from walking out the door? Well if you're like a lot of small businesses out there, you know, security is really a vital thing to you. So what approach do you take, well you know there is a lot of different technologies you probably looked at, some different method things like maybe you're trying to lock down documents, maybe different devices, physical devices, memory cards that’s sort of things there is a lot of ways to do it.
These are the questions what's the best way, well maybe all of them. You know a multilayered approach to network security is probably the best way to go. So thanks to the folks at Verona I was able or maybe it Verona’s. I found the white paper that has some really good tips in regards on what they call the “10 Imperatives” to prevent data loss. Now I wanted to share this with you today either some very good point to this. Now Verona is operating some of the assumptions that about 80 or 90% of your companies unstructured data list on your file server.
So they tend to focus on data governance on that data. Things like for network file shares on your, on your file server tend to be over subscribe by about 80 or 70 to 80% now that is based on things like users that rolls with groups they belonged to you know organizations are dynamic, your business is dynamic. People roles changed their need to access information change beyond a lot of times that we don’t change their permissions to those shares. So if they can get to the data you will rest of data walking out of the door via email or print out or on a USB drive.
So with that mind here is the “10 Imperatives” so imperative number one, visibility. Clear visual representation of the access settings on your network including users groups, memberships, folders and subfolders, NTFS, directories or permissions I mean. All this sort of thing including filtered views, user names, groups etcetera. You know you need to have that visibility.
Now number two is control, the solutions that whatever solution you use must include mechanisms for—to define test enact and even reversed filed folder permission on your network.
Now number three and this is a good one is auditing. So all aspects of your data you should be out including file touches for given active directory users, things such as access by a type of file or activity such as open-delete-rename activity by folder and access to the sensitive folders. All enacted users, all enacted data sets, all administrative changes including security configuration and changes by administrators. So auditing is very important whatever solution that you're going to use.
Now number four is securing. Okay, a system for unstructured data governance needs to provide and automated means for the revocation of data permissions. Specifically the system shouldn’t identify by name users whose access to give data if it should be revoked. Recomputed revocations as changes to active directory and file servers occur. Provide the means to test, recommended revocations prior to enacting on the servers and provide revocations with accuracy greater than the three nine’s which is 99.9% now that is very good advise.
Number five, performance any proposed solution for unstructured data management should not impede the performance of the servers, user access or the experience or effect you know business work flow. Specifically the system should not or I should say, specifically the system should not require windows auditing in order to delivers core functionality.
Now imperative number six scale, because most organizations add additional file servers right overtime and it does we just do that whether virtual or physical for all sorts of files over this data can grow rather quickly. So the system—the solution is to scale up as well to accommodate on structured data maybe doubling in volume every 12 months.
The number seven is easy installation, I think that is pretty simple and understand the practical solution. It has to be easy to implementation type your IT step it shouldn’t take any more than maybe four or five business to it to fully implement. It shouldn’t require a dedicated person, you know, word of that actually the vendor coming outside. It should be something you should be able to do yourself without you know having to pay professionals in this early to come in and do it.
On number eight ease of use, great it's easier to install, it is easier to use. A solution should not require a specialized staff member in order to use it, it really should be pretty much easy to understand and easy to use.
Number nine east of integration, data protection solutions do need to support a wide range. The servers and storage devices including windows server 2003, 2008 and including network storage attach or network attached storage devices or NAS and there from leading NAS vendors.
Finally number ten low total cost of ownership. A solution for data protection has to demonstrate quantifiable benefits in time and resource savings. Be sure to look for automation and the following areas which are most often manually intensive. Such as data permission revocations, data audit report generation, data entitlement review, stay of data identification, data business owner identification and data migration.
So there you have it, this are in “10 Imperatives” for data governance this are things to consider when you're looking for solutions or a series of solutions in securing your data on your network and making sure that that valuable information doesn’t walked out the door and keeping your customers safe, your business safe and just staying out of legal hot water. Listen I’m Bruce Stanley your Frugal Tech I mean this are good ideas and some of it’s a little difficult to follow but you always to make sure to check us out at www.FrugalBrothers.com look forward to talking to you. Remember for the new shop not making your money, your saving your money get it out there, I’ll talk to you later.
Transcription by:
Scribe4you Transcription Services