A Practical Approach to Data Access Governance

Solution Flyer
File Reporter
Storage Manager
A Practical Approach to Data
Access Governance Using File
Reporter and Storage Manager
With many organizations, the process of implementing Data Access Governance measures does not have
to be as complex and costly as some data security vendors might lead you to believe. While there are
certainly some regulated organizations requiring a thorough examination and identification of sensitive
data, many organizations are not as strictly controlled, and can consequently save thousands of dollars in
software, hardware, and consulting costs by utilizing the Data Access Governance features built into Micro
Focus® File Reporter and Storage Manager.
File Reporter and Storage Manager
at a glance:
+ Reports and analyzes network unstructured data
+ Reports on security of unstructured data
+ Manages unstructured data based on user role
What is Data Access Governance?
As is oftentimes the case with high tech terminology, “Data Access Governance” is a term
whose definition has expanded over time.
Furthermore, it’s a term that frequently gets
confused with somewhat similar, but distinct
terms like “Access Governance” and “Identity
Governance.”
A high-level definition of Data Access Govern­
ance (DAG) is the administered control of user
and group access to unstructured data on the
network. The objective of DAG is to have assurance that only authorized individuals can
access particular data.
Over time, government and industry regulations
pertaining to security and access have expanded the definition of DAG to include the location and identification of “sensitive data” that
might include Social Security numbers, credit
card numbers, and other personal information.
Determining Your Data Access
Governance Requirements
When properly implemented, DAG measures
can be an effective means of doing everything
from minimizing the risk of internal workers accessing sensitive corporate documents, to outside hackers accessing stored customer credit
card information.
There are many security software vendors offering expensive software, systems, and consulting that take an all-inclusive approach to
DAG. For certain organizations, these solutions
might make sense. For example, if your organization is in an industry that is regulated, if you
handle and store credit card data, if you are
publicly traded and under SOX control, or if you
are a military supplier, you probably need one of
these comprehensive DAG solutions.
But if you are one of the millions of organizations not encumbered with these types of
controls, then there is a less expensive DAG
solution from Micro Focus that provides you the
means of 1) Understanding how much unstructured data exists on your network, 2) Helping
control open shares, and 3) Reviewing access
permissions and stored data content.
Understanding How Much
Unstructured Data Exists
on Your Network
Before putting DAG measures into place, organizations must first understand the size of
the challenge they’re facing, and that starts
with knowing the amount of unstructured
data on their networks. Unstructured data is
the human-generated files like presentations,
spreadsheets, media files, and more that make
up over 80% of all network-stored data.
When it comes to unstructured data, you need
answers to questions like: “How much data are
we storing?,” “Who owns the data?,” “What data
is relevant and should remain on primary storage?,” and “What storage should be moved to
secondary storage, archived, or deleted?”
Micro Focus File Reporter reports and analyzes
the unstructured data stored on your network
servers and other storage devices. Powerful reporting options let you identify files according
to parameters such as file extensions, owners,
when files were last accessed, and many others.
Controlling Open Shares
Open shares are normally set up for access to
files that everyone needs access to. But over
time, these locations could be hosting files with
potentially sensitive information. Open shares
need to be reviewed, the people who have access to them need to be analyzed, and then any
needed adjustments need to be made.
File Reporter can provide you a detailed analysis of the files stored on open shares and help
identify what files you need to move to more
secure locations.
Reviewing Access Permissions
and Data Content
It’s imperative that organizations put measures
in place to secure their private documents. This
includes establishing permissions so that only
authorized personnel have access to these
documents. As new files are added and new
users are added or reassigned, these access
rights need to be reviewed to see if they are
still meeting organizational objectives.
In addition to data reporting, File Reporter is
a powerful tool for helping you determine the
security of that data. File Reporter specifies
permissions for stored data, all users who can
access a certain folder, and all of the folders
that a particular user can access based on their
identity and role. File Reporter can even compare the file system permissions between two
points in time.
When a user leaves an organization, depending
on the former user’s role, the contents of the
personal folder might need to be moved to a new
location where it can be fully reviewed for sensitive information. Micro Focus Storage Manager
provides this capability through user role-based
lifecycle storage management policies.
A Cost-Efficient Investment
File Reporter and Storage Manager leverage
your existing network infrastructure with minimal
impact. Deployment is fast and easy, and you
can have both products up and running quickly.
161-000076-001 | M | 01/17 | © 2017 Micro Focus. All rights reserved. Micro Focus and the Micro Focus logo, among others, are trademarks or registered trademarks
of Micro Focus or its subsidiaries or affiliated companies in the United Kingdom, United States and other countries. All other marks are the property of their respective owners.
www.microfocus.com
Micro Focus
UK Headquarters
United Kingdom
+44 (0) 1635 565200
U.S. Headquarters
Rockville, Maryland
301 838 5000
877 772 4450
Additional contact information and office locations:
www.microfocus.com