Major United States Bank

Need to identify and protect sensitive data following a cyberattack

The Senior VP of Infrastructure & Information at the bank explains why cost implications are secondary to many other concerns the bank had following the attack: “Although financial loss in the form of regulatory fines for non-compliance is an issue of course, we were far more worried about the reputational damage an attack like this could cause. We ran the risk of being downgraded by our regulators and urgently needed to get full control of our data. As our data storage platform has been in use for decades, the security controls for it were unclear. Meanwhile, the data had grown to over 50 terabytes and within this we were certain there would be sensitive data that needed to be identified and protected. Through our research, we arrived at Voltage Fusion as being a potential solution for us.”

By analyzing access to data, organizations can identify risk and make accurate decisions around optimizing and securing the data. Voltage Fusion provides visibility over vast data estates and can automate many actions, including data protection, minimization, and preservation. Part of the data discovery for this organization was to identify data that needs to be compliant with the Gramm Leach Bliley Act (GLBA). Voltage Fusion contains out-of-the-box and custom grammars to determine risk scores for GLBA and other standard sensitive data specifications. Following the analysis, Voltage Fusion will provide a report outlining recommended actions for data that meets the defined grammars.

This is a very consultative partnership. Working through this data is a technical and collaborative effort that requires a lot of trust in a vendor. We felt confident that OpenText could help us meet our regulatory deadlines and safeguard our data against future attacks.

Voltage Fusion and File Reporter proved a winning combination

The Senior VP of Infrastructure & Information comments: “We invited OpenText to host a workshop for our data teams. We had investigated other vendors, but OpenText demonstrated clearly that it was the only company to provide integration between its solutions and our specific data repositories. This, coupled with the expertise we saw from OpenText consultants, convinced us that Voltage Fusion and File Reporter were the right match for us.”

Voltage Fusion is a SaaS solution and the OpenText SaaS team worked with the company to configure its dedicated tenant. Many Voltage Fusion customers choose a dedicated instance for regulatory reasons and because the data ingestion rate for a dedicated tenant is much higher than in a shared-tenancy environment. As time was of the essence for this organization, and with a data volume of over 50 terabytes, the dedicated tenancy instance worked best. In a train-the-trainer model, OpenText consultants helped educate the data teams on the solution so that they could run the project independently for the most part.

Voltage Fusion was leveraged to identify files and folders with sensitive data across our environment. OpenText was on hand to support custom report creation, help develop custom grammar rules, assist with configuring tags, reporting groups, and weighted labels, as well as administrative focused knowledge transfer. They also assisted with GLBA data reports and export results that were then leveraged by File Reporter. After this exercise, File Reporter identified the permissions and ownership of those files and folders by scanning the identified data and generating relevant reports.

We had investigated other vendors, but OpenText demonstrated clearly that it was the only company to provide integration between its solutions and our specific data repositories. This, coupled with the expertise we saw from OpenText consultants, convinced us that Voltage Fusion and File Reporter were the right match for us.

Simple and fast sensitive data discovery in a trusted partnership

“We were very impressed with the simplicity of the sensitive data discovery,” says the Senior VP of Infrastructure & Information. “We knew File Reporter was the right decision for our environment, and we very much liked the platform approach that Voltage Fusion added. Instead of selecting a single element to scan data against, Voltage Fusion gives us the opportunity to scan against any current U.S. consumer privacy regulations. This is a massive timesaver for us, as we are up against regulatory deadlines, and we found the prebuilt grammar sets met most of our needs.”

He concludes: “This is a very consultative partnership. Working through this data is a technical and collaborative effort that requires a lot of trust in a vendor. We felt confident that OpenText could help us meet our regulatory deadlines and safeguard our data against future attacks.”