Data Loss Prevention

Hello Guys,

I work in a company where they are trying to classify all the raw data that they have hiddin in the applications they have purchased.

So my job is to contact Product/ IT owners of these applications and ask them individually if thier software contains PCI, PII and / PHI Data.

I thought, since we have 150 product owners might as well send them a survey with Applications in the drop down and PCI/PHI or PII data in multiple choice.

I was wondering if you guys have any template or sets of questions that i can use for this.

Thanks

Hemant

Do you have the Data Isight product? If so this would be the best place to start.  Data Insight can help us understand who the data owner is of a file based on several criteria, one of them being who access the file the most.

There is an add-on to Data Insight that automates some of this work as well.  It can send notifications via workflows to have the data owner confirm whether or not the data should be there or not along with who should have acces to the data.

If you don't have either product then Network Discover can still help you out.

Good luck