'Most Innovative Startup 2020' by RSA - Watch the videoLearn More
Published on May 4, 2021 AUTHOR PRIVACY RESEARCH TEAM
Data is the most important asset for any organization and it’s their responsibility to keep it safe. That being said, in reality data breaches continue to be inevitable threats that organizations have to face from time to time. A data breach is when a consumer's personal data is compromised and lands in the hands of threat actors. The cause of a breach can be multifold such as malicious intent, employee neglect or many other reasons, but either way the breach will likely have a catastrophic impact on the organization if it’s not prevented ahead of time. This is where Sensitive Data Intelligence or SDI™ comes into play.
Sensitive Data Intelligence tools help organizations minimize the effect of data breaches by providing the following functionalities:
Amongst the plethora of tools provided by SDI vendors, Exact Data Match (EDM) is a critical tool in the data discovery stage. It helps discover business information and other targeted sensitive data in underlying structured or unstructured target data stores.
EDM is designed to help discover and secure consumer sensitive data such as MRN, bank account numbers and social security numbers by fingerprinting the actual data instead of leveraging pattern match techniques. This enables EDM based discovery to eliminate false positives and help customers focus on actual detections making it a very efficient tool for sensitive data discovery.
EDM-based data classification allows organizations to create customized Exact Data Profiles that can be matched to the exact values in a target structured or unstructured datastore containing this sensitive information. Securiti supports a elastic scalable indexing database that can be refreshed according to your needs and used on demand or during periodic discovery scan jobs. This makes it flexible and as employees, clients or patients come and go, your customized Exact Data Profiles remain current and up to date.
With Exact Data Match (EDM)-based classification, you can create custom Exact Data Profiles that are designed to:
Let's take an example of healthcare data to see how EDM can help protect a consumer's sensitive information. In this example we assume that a healthcare provider needs to prevent the sharing of certain medical records that contains information on a specific patient. This data needs to be protected and the health care provider needs to ensure that this information isn’t sent to any external users. The organization configures an Exact Data Match (EDM) template and corresponding profile based on their patient records to do exact match lookup.
A patient EDM Exact Data Profile is configured to detect content which matches patient SSN or Patient ID, along with other patient information. After this data is discovered, regulations based policies can be implemented to restrict access to this information.
Exact data match configuration involves three key steps:
Securiti’s Exact Data Match Classification tool can help organizations simplify data security by detecting the consumers' sensitive data across 100’s of target data stores and applying security controls on it.
Customers can create complex combinatory logic in their Exact Data Profiles to create a boolean expression to cover the field combinations they require. This is done by selecting a primary field and corresponding secondary fields based on the data combinations required. As an example,
To secure PII information:
To secure company issued credit cards:
With data growing rapidly and organizations trying their best to stay in line with privacy regulations, being responsible custodians of their consumers data, Securiti’s EDM tool is an ideal solution for protecting sensitive consumer data.