A Fortify 24x7 brand, looking after the computers, records and back office a small firm trades on.Sign inTalk to the board
CyberSec Managed
Position 05 / Data discovery

Nobody knows how many copies of the client list exist. That is the whole difficulty.

Regulated and commercially valuable files never stay where they were put. They get exported for a mailshot, sent to the bookkeeper, copied to a memory stick for a meeting, and abandoned in a downloads folder. These two circuits locate them, then govern what may become of them.

ActifileLocate it firstThen govern it
2 circuits wired at this position
On the board2
EquipmentActifile
Charged byDevice
Order of workDiscovery, then enforcement

Locating has to come first

Every data protection product ever sold assumes the buyer knows where the sensitive files are. Almost no small firm does, and those convinced they do are usually counting the tidy copy inside the trade system and overlooking the eleven spreadsheets that came out of it.

Actifile searches the machines and shares you enroll and reports what turned up and where. It also scores exposure on each machine, which sounds like a vanity number and is not: it converts an intimidating heap of findings into a ranked list, so the laptop carrying four thousand records gets dealt with ahead of the one carrying nine.

What enforcement really does

Circuit two acts on whatever circuit one turned up. Encryption goes onto the file rather than only onto the disk beneath it, and that distinction is the one that counts once a copy leaves the building. A file carried out on a memory stick and left in the back of a taxi cannot be opened by whoever picks it up.

Exit control covers the ways data leaves, and a release request lands with a person, so genuine work is never halted. Balancing those two is the entire craft. A control nobody can work around gets switched off inside a month, and a control everybody can work around was never a control at all.

An intimidating heap of findings is not a plan. A ranked list is.
Jacks on this position

Write ups and rates

Prices below arrive straight out of billing. Whatever gets patched in waits on the list while you read on.

Fortify-DLP-ClassifyWrite up

Sensitive Data Discovery

Actifile, locating the files first

Nothing protects a folder that nobody has ever located. This searches the machines and shares you enroll and reports where the card numbers, the medical notes, the wage runs and the client lists have quietly piled up over the years.

  • Sweeps workstations, servers and shares for regulated files and anything of commercial value.
  • Scores each machine, and a score is what puts clean up into an order.
  • Turns up the duplicates nobody recalls making, and that is usually where trouble sits.
Patched toActifile
Listens onFiles across the machines and shares you enroll
Line heldA per device tally of what turned up and what losing it would cost
Answered byA written finding, ranked so you know what to deal with first
Traced byOne scanned device, charged monthly
Readingper device
payable in advance, monthly
QTY
Fortify-DLP-EnforceWrite up

Encryption and Channel Control

Actifile, governing where those files may travel

With the sensitive files identified, this governs the exits. Encryption rides along with the file, so a copy that ends up on a memory stick left in a taxi is a copy that whoever finds it cannot open.

  • Encryption is applied to the file itself, not only to the disk sitting underneath it.
  • Control over memory sticks, over uploads, over the rest of the exits.
  • Release requests reach a person, so real work does not come to a standstill.
Patched toActifile
Listens onThe exits files use, including removable media and uploads
Line heldEncryption applied to the file, travelling with the copy
Answered byFortify 24x7 operators, for policy and for release requests
Traced byOne enforced device, charged monthly
Readingper device
payable in advance, monthly
QTY
Plain limits

Calls we cannot take

This position earns its keep and it has edges. Set out below is the ground these circuits leave uncovered, plainly enough to plan around.

  • This is not a compliance certificate. Discovery and encryption support an argument that you handle data carefully. They amount to certification under no scheme whatever, and we will not stand by while anybody implies otherwise.
  • Access you granted can still walk out. Anyone permitted to open a document can read it, remember it, or photograph the screen. Your leavers process and a habit of reviewing access answer that. Software does not.
  • Classification runs by machine, so it is imperfect. Pattern matching finds most regulated material reliably. Something peculiar to your trade may need a rule written for it, and setting that expectation now is fairer than setting it in month three.
  • Paper sits outside all of it. The printed copy in the filing cabinet is in scope for nothing on this page.
  • It covers what you enroll. A share nobody mentioned, or a personal cloud account somebody uses because it was handy, is neither searched nor governed.
NOTICE

Heads up: card statements show FORTIFY 24X7 - CyberSec Managed is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.