Elimination of Data Breaches for 11 Years and Still Going Strong
Government agencies are particularly sensitive to the potential of data breaches and compromising citizens’ privacy information. This US military agency, an early adopter of Concept Searching technologies, has been successfully preventing data breaches for the past 11 years.
Its challenge was threefold. The first problem is that the quantity of information, and the speed at which it must be processed, poses challenges to government workers. Manual tagging efforts introduce a great many errors, which remain unresolved throughout processing.
The second problem focuses on available technologies and the inability to identify organizationally-defined confidential information contained within documents. Most security solutions will address the identification of standard descriptors, but are unable to identify information that resides within content, which is what makes it more valuable for sale on the black market. It is unfeasible to manually review all documents to identify and prevent potential compromises.
The third problem is immediacy. The protection of privacy or confidential information carries with it a sense of urgency to immediately protect the data and prevent portability. Typically, it is left to administrators to read through reports and take appropriate actions, after the fact. For zero-day exploits, which are cyber attacks that occur on the same day the system weaknesses are discovered, and which are on the rise, this is too late. Real-time identification allows administrators to take action in seconds after the occurrences.
Using conceptClassifier for SharePoint and conceptTaxonomyWorkflow, this agency was able to rapidly deploy a solution that addressed all three problems. Using the core capabilities in conceptClassifier for SharePoint, all manual tagging was eliminated, solving the problem of user errors. Content is automatically classified to a security taxonomy that is used to maintain and manage privacy and confidential terms, phrases, keywords, and acronyms associated with data breaches.
conceptTaxonomyWorkflow provides the ability to rapidly and easily set up workflows and automate business processes. Workers who use data most frequently, subject-matter experts, who have the appropriate authority, can create workflows in minutes rather than days. Since the metadata generation identifies multi-word terms in the form of phrases and concepts, confidential agency information can also be specified.
The process can be run in near real time or in batch mode, and will identify compromises found, change the content types in a SharePoint environment, and route to repositories or administration contacts to resolve potential privacy breaches. This approach has been successfully implemented for the past 11 years, and the agency has avoided any breach of privacy or confidential information.