Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Anchor_heading=h.gjdgxs_heading=h.gjdgxsContents

Table of Contents

Anchor

...

_heading=h.

...

Prepared By

...

Reviewed By

...

Date

...

Document Version

...

Deepak K

...

Artem Kalaitan

...

28-June-2022

...

V 1

...

1fob9te
_heading=h.1fob9te
Introduction to

...

Getvisibility Synergy Pro

Anchor
_heading=h.3znysh7
_heading=h.3znysh7
Overview

...

The Getvisibility classification tool is built on sophisticated machine learning algorithms to enable organizations to discover, classify and secure their most sensitive data. The Getvisibility platform combines smart agent technology and machine learning to provide a uniquely powerful solution for data classification and tagging. This is the first solution to enable automated, historical and manual classification with one deployment. This is unique but it also has a very significant value dramatically improving the quality of the manual classification process by leveraging the advanced AI model and understanding of historically created data.

Anchor

...

_heading=h.

...

Anchor
_heading=h.yco5y91bd0ge
_heading=h.yco5y91bd0ge
Data Classification Overview

...

Accessible only to designated or relevant members of staff due to its potential impact on the organisation that could result in legal action, reputational damage or financial loss.
Examples:

  • Payrolls, salaries info

  • HR personnel records

  • Credit card and financial account information

  • Internal investigation information

  • Intellectual property

  • All legal and attorney-client communications

  • Medical records

  • Detailed budgets or financial reports

...

This is a special category to represent multiple regulations, for example as HIPAA or ITAR. Loss of such data results in a major legal action and a massive financial loss. Protection of such information is required by law/regulation or required by the government to self-report.
Examples:

  • Sensitive personal data (Physical or mental health, Criminal convictions, etc)

  • Medical Research (HIPAA)

  • Academic research regulated by Export Controls (ITAR/EAR) export-related security controls on information that is subject to a Technology Control Plan

  • Student information classified under FERPA

  • Credit card information covered by PCI-DSS rules

  • Court or national security orders that prohibit disclosure (e.g., subpoenas, National Security Letters)

...

Classification

Public

Internal

Restricted or Sensitive

Confidential

Regulated or Protected

Audit controls

Not required

Encouraged

An organisation must actively monitor and review their systems and procedures for potential misuse and/or unauthorized access.

An organisation must actively monitor and review their systems and procedures for potential misuse and/or unauthorized access.

An organisation must actively monitor and review their systems and procedures for potential misuse and/or unauthorized access.

...

.

...

Anchor
_heading=h.hc405vw0ic51
_heading=h.hc405vw0ic51
Sample flowchart for determining Data Classification

...

Always “WARN” user when a CONFIDENTIAL classified email is sent out, except allow when CONFIDENTIAL email is sent to Forcepont.com & Block when CONFIDENTIAL classified email is sent to “Gmail.com”

k. Click NEXT and FINISH

l. Click RESTART

...

End Of Document

...