The Outcomes:
Past audit findings remediated with ongoing workflows deployed
Cloud strategy execution unblocked and data migrated
Mature Data Governance and Classification platform and process in place
All of the client’s file data was classified and tagged by updated organizational risk categories. Past audit findings were remediated and cloud strategy execution was unblocked. All file data was migrated to Microsoft Sharepoint and OneDrive. Automated workflows were deployed to data owners and managers for ongoing policy action and audit readiness. Mature data governance and classification platform and process put in place for compliance and future file data assimilation or divestiture.
The Client:
Investment and retail bank with ~1.2 petabyte on premise file system and ~300TB Office365 file system. Sharepoint and OneDrive adoption blocked by data classification, compliance and cost concerns. Recent external audit findings pertaining to EU BMR, GDPR and NYDFS regulatory compliance.
The Solution:
Classify360 SaaS platform deployed across on premise file shares and Office365 file systems. Metadata level indexing reported ~ 30% of existing data set was out of retention with no business value and burdening the business with avoidable cost and risk. Content level indexing reported a massive burden of uncontrolled risk within file data sets and uncovered an additional ~10% of content level duplicates. Simple model guiding influenced by Customer risk category specifics increased recall scoring (accuracy and precision) above 95% for all priority models including personally identifiable/confidential information and various statutory categories. Risk tag schemas of existing Data Loss Prevention (DLP) and Information Protection (IP) solutions were incorporated into Classify360 to supplement the capabilities and reach of these tools by injecting appropriate labels into the header level of newly classified files.
This high level of accuracy and precision, in conjunction with the extension of existing DLP and IP value, gave legal and compliance stakeholders the confidence required to bring the platform into production. After administrative configuration, integration into Customer Identity Access Management, ServiceNow and SQL based reporting flows, Classify360 was presented to Data Managers across organizational units, allowing for proper dispersion of workflow burden and accountability.
With the Classify360 platform in place, immediate and significant action was taken to delete out of retention both behind the firewall and in Office365. Risk data was deleted, protected or stubbed as appropriate. Remaining on premise file data fully migrated into Office365. Information protection was strengthened before, during and after the immediate project. Cloud cost was minimized and legacy on premise storage was decommissioned, allowing customer to realize the promised benefits of transformation in a rapid and secure manner.
