InfoGovANZ

Information Governance Think Tank

Supporter Contributions

The Good Shepherd Model for Cybersecurity, Privacy and Regulatory Compliance

by

WHITE PAPER   Four principles for protecting private data to improve compliance with privacy regulations Executive Summary Regulators Sharpen their Focus on Protecting Private Data “Assume You Are Compromised” – Now What? The Good Shepherd Model Case Study: Investigating a Datacenter Breach the Hard Way Security and Privacy are Strategic References   EXECUTIVE SUMMARY Organizations that store customers’ private information have a duty of care to protect that data. Credit card numbers and other personal details fetch a high price on the black market and unfortunately, organizations do a very poor job of keeping them out of the hands of cybercriminals. Regulators in many countries are now levying considerable penalties against organizations that fail to protect people’s private data. Under the European Union’s General Data Protection Regulation (GDPR), for example, organizations face fines of up to €20m or 4% of annual turnover for exposures of European citizens’ private data. They […]
Member only content (join now or login)

Cleansing and Organizing Unstructured Data Stores in Preparation for Migration – ActiveNav

by

Background Regional wholesaler and largest supplier of treated water in the United States serving 19 million people, The Metropolitan Water District of Southern California (The “District”) had accumulated 80 TB of data over 30 years of file share use. With 1800 employees, the process to clean up the data was not only a technical feat, but also a daunting organizational project. A District-wide employee assessment determined the legacy file systems were not meeting the District’s needs for sharing information among staff and stakeholders. Staff reported they could not readily find information needed for daily operations and much of the data appeared obsolete. To improve information access and governance, the District planned to migrate its file share data to the cloud and tag it with searchable metadata. However, they realized that first the data needed to be understood, cleansed, and better organized. At a Glance ABOUT Public Sector Utility 1800 Employees […]
Member only content (join now or login)

Active Navigation – Equifax Case Study

by

Active Navigation - Equifax

Following the highly publicised Equifax data breach in 2017, Active Navigation’s software was deployed into a complex tech stack and worked to identify, classify and protect sensitive data assets.

While IG, Legal, Risk and eDiscovery practitioners understand the need to minimise data in accordance with justifiable disposition of data and records, privacy regulations are now also drivers for organisations to review the personal information they are collecting.  GDPR’s principle of data minimisation is making organisations rethink what constitutes acceptable data use.  Australian Privacy Principle 11.3  requires an APP entity to take reasonable steps to destroy or de-identify personal information that is no longer needed for any purpose for which the personal information may be use or disclosed under the APPs.

You can read more about how Equifax is using Active Navigation’s software, Discovery Center, to identify and delete unnecessary records, which proactively reduces overall data surface footprint and facilitates data privacy compliance.

Read the case study here.

Making IG Real: Six Stories from the Front Lines of Information Governance Success

by

Making IG Real- Six Stories from the Front Lines of Information Governance Success

Over a typical business cycle, a large organisation produces staggering volumes of data. This will include essential records, valuable business intelligence, and knowledge uniquely relevant to the business. But frequently 50% or more of the content is utterly useless – it is dead weight, consuming storage capacity and obscuring the genuinely valuable content, burying the essential digital needles in terabytes of useless haystack.

Download Now

Information Governance at Work: Pandora Media

by

With the help of the file analysis and governance experts, the Pandora GRC team discovered that at least 60% of its unstructured data had no value and there was no business or legal reason to continue to spend precious resources on protecting and storing it. So they took control, realising significant security,
privacy, cost, and productivity benefits along the way.

Download Now