okay I'm ready we are rolling okay so
you're probably thinking crap not
another deal keep on I wasn't this like
what three years ago or something like
that your syllabus so a couple things
about me I'm a security consultant at
food on Hamilton and where i do
commercial consulting for large
companies and I've done a lot of GOP
work and the scientific notation and
collaborations for laurent quit large
people environments and global
environment using mousse every dlp
product out there you can find me on
social media @ d maven and the
obligatory disclaimer these Boston over
twice the thought or opinions of my
employer so just briefly I'm not going
to talk about why vopa juice listen frag
on it has place I'm not going to tell
you what products of I or talk about UVA
but i will talk about how to take a data
governance centric approach for dlp data
protection if you need anything
analytics develop actionable
intelligence so what is the old peaceful
manner we clearly still have issues with
people users taking data either
religiously or excellently sending
something out that they shouldn't Inc
causing privacy breaches so GOP is not a
silver bullet when it comes to security
it has a lot of issues most notably when
you can play a necktie product it third
muy bien it's going to slow down things
for users or it'll look like a tea break
things mobile kind of Kluge like with
trying to handle ILS
and once you get incident data how you
develop actual information around it and
that's a little bit more up in a man is
rough it's troubleshooting is really
hard especially at work environments
organizations really take typically take
a pragmatic approach toward security and
a lot of that is because companies will
spy all these security products and not
really look at how they can work
together and if there's overlapping
capabilities and this role which is kind
of a comic that started coming apart
Lance or in the globe and it really
refers to like the dado as a lung and
the leaves have applications and other
related sources and then you have on
file shares and user machines or I'm
done dries so now that he'll keep it
open I might keep and make sure it stays
running and that's really where a lot of
companies all flat you can bring in a a
company to implement guilty but how do
you actually Brian us as a company start
putting in a lot lots of rules then it
died right slots a lot hands it so you
need people to actually look at those
rules to toon those rules to prove these
false positives is the canned rules are
usually ground just like a tidy house
and you I had to write people there to
do it good do they have the right skills
to do to tune the rules to it to do the
investigations and then regulatory
requirements are a positive- for GOP you
can use ELP to help comply with these
rights but also it creates challenges
left leg if you're trying to clip the
deploy dlp to Germany say and having to
get sign up from a workers council
and because of that so you also it also
helps you comply with like GDP are if
you use use it right but this GOP
ultimately comes a lot of it I think of
the checkbox offer but I think it can be
more plan so we kind of talked a lot
about minus CLP have issues but how can
we use GOP and other technologies to
build a stronger a framework for data
protection so head of core data
governance and classification and users
are not great at it but it's something
that you have to help train them on or
through and identify where the data is
being used it where is being created and
where it's being accessed and you want
to understand where the data being
orphaned as well so once you kind of
idiot a handle on God near the
governance then you need to start
combining all that data and applying
analytics do it so correlating against
other data sources are like file share
logs or database blog didn't take
activity logs because then you can start
seeing movement from those authoritative
sources to the those egg whites and
other give up locations I've seen
seasonal trends you can see that certain
business unit course of business units
have insecure business processes and
start understanding how effective your
controls are so if you see a lot of
fealty incidents and then you start
seeing a downturn when you apply a
notification rule or some sort of thing
like that then you can it can help you
understand how about if it scrolls are
or alternatively use an uptick that
great other questions like I like tax
how you typically see kind of deal b day
so the analytic is really nice to
private discussions with stakeholders
and frame the conversation for head
around how do i prioritize and drive
remediation of insecure business
processes and how do we identify
additional new stages so pivoting from
type of personally identifiable
information protection to intellectual
property or financial data so like what
I've seen companies start doing then is
looking at joint venture data or making
sure that doesn't go out or supper a dog
research data and what you start getting
all of that together it makes a lot
easier to start on any you can't just
throw body at ELP and with huge budgets
starting to shrink now so one thing that
I've seen a lot of companies view is you
automate classification of data at rest
while it has its pluses and minuses most
notably performance and false positives
you can you can use that to the trust
your orphaned and abandoned data problem
and combine that with applying a DLP
rules would prevent classification you
can make sure that did I have them in
touch does not go out in that way
encryption I know view around his head
of a gotten the black eye and kind of a
dirty word in security
because it doesn't work well but I feel
like there's been a lot of progress in
this space and by using encryption you
can make sure that it did it does go out
you don't that is not as big of an issue
you can control the sprite or access on
that data wanted and then release
ultimately real teachers for small
portion of data protection that the main
point of data protection nation we
identify which is the hard part never
touch critical data as it moves within
the organization that leaves and the
hard part is trying to make that
expressionless as possible or it's
simple from end users see um am I making
it simpler it makes it easier to have
the conversations with stakeholders on
using GOP tools or other type security
tools 11 are so ready for any questions
or that you only have sure you very much
data at rest yes and you talk about
these er any riches need you to the
encryption at rest how does that affect
your guilty school so you can meet the
question was how does the impact or host
encryption impact neogi across or COPD
and address um it's you can I depend on
the tool you can allow specific service
accounts available release release set
to an application for specific location
so there is a great layering around that
there some accompanying them my company
is doing some hardship work with and
they like download link off at level or
even some encryption down to that level
or even down to late sections of what
we're docking for example so you can it
access what other questions thank you
very much