Veritas Data Insight User's Guide

Who owns the data

Who is responsible for remediation

Who has seen the data

Who has access to the data

What data is most at-risk

Frequency of usage of data

Data owner identification

Data Insight enables rule-based inference of data owners based on actual usage. Data owner information may not reflect the responsible party. The responsible party or data owner can be a line manager in the business unit, the head of a department, or an information security officer. Veritas Data Insight provides the information to tie the most active user of a file to a manager or responsible party for remediation steps.

Data custodian identification

Data Insight enables the assignment of one or more users as custodians of a data repository. Custodian tagging is typically used to determine the person responsible for remediation. The assigned custodian need not have made any accesses on the files and folders. In addition to the physical paths, you can also assign custodians on DFS paths.

See About data custodian.

Data leak investigation

In the event of a data leak, you may want to know who saw a particular file. On the Veritas Data Insight Management Server, you can view detailed information and an audit history of who accessed the data.

See About audit logs.

Locate at-risk data

Data Insight enables organizations to find which shares or folders have overly permissive access rights. Organizations can use this data to prioritize risk-reduction efforts such as the discovery of sensitive data or a review of permissions (or access control rights) to limit access to only those individuals who have a business need.

See About permissions .

See About SharePoint permissions .

Manage inactive data

Data Insight enables better data governance by letting you archive inactive and orphan data using Enterprise Vault. Additionally, you can decide to manage the archived data by applying retention rules, deleting the archived data, or by putting legal hold on the archived data.

See About managing data using Enterprise Vault and custom scripts .

Provide advanced analytics about activity patterns

Data Insight enables you to analyze the activity on high-risk folders by providing in-depth analysis of usage and collaborative activity. The analysis helps you classify users based on configured attributes to better understand the activity pattern of users in your environment.

See About the Data Insight Workspace.

See About visualizing collaboration on a share.

Permission remediation

Data Insight leverages the usage analytics provided by audit logs to provide recommendations for revoking permissions of inactive or disabled users on a path. You can then analyze the business impact of applying the recommendations and configure settings to handle the permission changes.

It also enables you to search for specific permissions and revoke them where necessary as also modifying group membership directly from the Workspace.

Content classification

Data Insight lets you classify content on data sources that it monitors by providing means to define classification rules (policies) that let you specify values (tags) that you can assign to any matching items. The classification feature works in conjunction with the policy framework provided by Veritas Information Classifier to assign tags to files.

For example, a content scan may search for items whose contents include a credit card number and assign a tag of "PII" (for "personally identifiable information") to any that do.

For information about setting up classification and initiating classification requests, see the Veritas Data Insight Classification Guide.

Remediation using the Self-Service Portal

Data owners and custodians can take remediation actions using the Self-Service portal. Custodians can log in to the Self-Service Portal to do the following:

See About the Self-Service Portal.

Raise alerts

You can configure policies to raise alerts when there is anomalous activity on sensitive data.