Effective May 25, 2018, the General Data Protection Regulation (GDPR) requires organizations to strengthen data protection and security measures to protect EU citizens’ personally identifiable information (PII). Specifically, organisations need to make sure that only the people who need to have access to this information have access to it. Reasonable measures must also be in place to protect the data from unauthorised access and to demonstrate accountability of those who have access to the data.
GDPR affects all organisations, across all industries and regions – even those outside the EU that collect and store personal data of EU citizens. GDPR also poses major challenges, including:
- Need for Continuous Compliance and Audit - Organizations must be able to demonstrate compliance at all times.
- Mandatory breach and data leak notifications - In the event of a breach, organizations must notify the local data protection authority and all affected customers within 72 hours or risk severe fines and loss of trust.
Opportunities
Prepare for GDPR by improving the security of your Microsoft environment and endpoints while strengthening data protection mechanisms. This will help you achieve and maintain GDPR compliance and avoid costly fines. With Quest solutions, you’ll be able to continuously assess, monitor and control your environment so you can be more productive, more secure and more GDPR compliant.
Detection and evaluation
Reduce the risk of data breaches by making sure users have appropriate access to unstructured personal data that may exist between Windows file servers, NAS drives, SQL Server, Office 365, Active Directory (AD) and more.
Scan your entire network to identify connected devices and be able to present a detailed inventory of hardware and software – including non-computer devices such as network drives, printers and IP telephony. These inventory reports facilitate proof of compliance.
Surveillance and investigation
Data breach notifications notify your data protection officer and other stakeholders immediately so you can quickly investigate the cause and scope of the breach. For compliance purposes, event log data is stored long-term and compressed. We also offer end-to-end monitoring of both your physical and virtual environments.
Management and control
Strengthen internal security and governance by controlling access to sensitive resources to ensure data is protected by design and default. Delegate admin rights without worry using the “least privilege” model. Check that security rules are set appropriately, then grant, revoke or modify access to data and applications as necessary.
Mitigate risks such as accidental or illegal destruction, loss and modification by implementing updated security patches and software versions on servers and endpoints. Streamlining the processes of configuring and implementing policies will reduce these risks.
