コンプライアンスとデータ保護の向上

サイバー攻撃の脅威が加速し、急速に規制環境が厳しくなるに従って、データ保護とコンプライアンス戦略がビジネス上でクリティカルな決定に変わってきています。

組織内で最もカオスであり、流動的な情報リポジトリである非構造化データは、同時にデータ保護とコンプライアンスチームにとっては最も重要であり、かつ最も管理しにくいものです。

非構造化データフットプリント全体を最初に分析する能力は、絶対的な要件であり、またその能力があれば重要な技術課題を検討できる可能性があります。このデータを、記録/非記録、IP /公的機関、職員/クライアント/下請け業者PII、保持期間内外などに分類することができるため、組織は次のステップを実行することができます。これらのデータカテゴリの適切な保守と管理を、ユーザー集団の実務に統合することで、保護された、またコンプライアンスに沿ったファイルサービスを確立するプロセスを完了することができます。

非構造化データフットプリント全体でしっかりしたデータコンプライアンスと保護プラクティスを確立することは法的要件です。

 

Useful Resources

データコンプライアンス

データコンプライアンス:コンプライアンスのステータスの定期的な監査だけでは不十分です。 組織は継続的なコンプライアンスを達成するために努力しなければなりません。継続的にリスクを監視し、ステークホルダーには継続的に情報を提供します。 

データ保護

非構造化データリポジトリの現在の内容を明確に理解することは、「一般データ保護規則」の導入準備のための確固たる基盤を形成します。

ILM

テクノロジがサポートされたワークフローによって、構造化データに成功裏に適用される記録管理システムが、非構造化データにも同様に適用されます。

IT管理

適切なワークフローの実装と継続的な監視により、高価なソース集約型の外部サービスを予期せず購入する必要とせずに、監査要求を効率的に満たすことができます。

Northern Parklife icon

Let’s take control over your data management

We accelerate the goals of growth stage companies by providing the expertise and experience they need to hit their next stage of growth faster.

Looking for workflows that drive continuous compliance?

Data compliance must be an organic component of every organization’s standard working practices – written guidelines and periodic auditing are not sufficient.

By monitoring key risk indicators – identifying sensitive or restricted data as it stored in the file service – by reporting the presence of this data to relevant stakeholders and by guiding actions, the organization is able to continuously maintain unstructured data footprints in-line with data compliance requirements.

Northern’s Solution

Northern’s software solution enables the organization to understand how the file service is being used and to involve stakeholders in establishing and maintaining a specific pattern of usage.

To fulfill the need to establish a continuously compliant pattern of usage, Northern recommends the use of the Information Governance and Compliance solution area. This provides access to the necessary content analysis capabilities and the possibility to pass targeted information out to relevant stakeholders in a self-service portal.

The benefits

Continuous evaluation of data compliance, supported by workflows that inform and involve relevant stakeholders, establishes a culture of data compliance. The benefits to the organization center on risk avoidance.
  • Unstructured data represents the single greatest compliance risk for the organization. By establishing a culture of regulatory compliance, offering continuous support to business users in their use of the file service, organizations are able to protect themselves against potentially crippling legal penalties, financial forfeiture and material loss.
  • Periodic analysis of levels of compliance is valuable but, as a reactive strategy, it does not tackle the underlying need to adapt working practices in the organization. Continuously involving relevant stakeholders and supporting them in decision making processes establishes a proactive and collaborative approach to data compliance.

Taking responsibility for GDPR readiness?

The General Data Protection Regulation (GDPR) is a new regulatory framework introduced by the European Parliament & Council. It was passed into law in April 2016 and will be applied from May 25th, 2018. The regulation sets out a single framework for the handling of Personally Identifiable Information (PII) pertaining to European citizens. All organizations (regardless of geograhical location) that collect, handle and/or store this type of information must ensure compliance or face sanctions of up to €20m ($21m) or 4% of annual world-wide turnover (whichever is greater). GDPR presents considerable challenges and risks; organizations globally must ensure their readiness. As an unstructured data pool, with a large number of data owners and stakeholders, user data must be a key area of focus for the organization’s DPO function. If robust and cost-effective compliance mechanisms are to be introduced then file system structures must be simplified, data accountability improved, and redundant, obsolete and trivial data removed.

Northern’s Solution

Northern delivers a powerful set of capabilities that support the implementation and continuous management of compliance mechanisms.

The Information Governance and Compliance solution area provides the ability to monitor the unstructured data footprint and identify areas of possible non-compliance. These analyses can be based solely on file meta-data or on file content (text mining). Stakeholders, such as data owners or members of the Data Governance team, can then be invited to review, and inspired to act.

The benefits

The ability to continuously monitor the unstructured data footprint, identify areas of possible non-compliance, and then involve qualified stakeholders in mitigating these risks provides clear benefits to the work of the Data Protection team and the organization as a whole.
  • Regulatory compliance within unstructured data must begin with an understanding of the data footprint itself. A risk assessment of all pockets of unstructured data enables specific and relevant strategies for achieving compliance to be defined.
  • Focused reports, clear directives and the knowledge that only data owners have about the content of their files allows regulatory compliance to become an element of standard working practice.
  • Regular review of stored data, ROT removal and general house-keeping initiatives ensure efficient use of the file service. Maintaining a controlled and more transparent data footprint reduces the cost and complexity of ensuring data protection and compliance.
Contact Us