A Fortify 24x7 brand. Controls that carry a written method, a stated scope, and a result you can check.Sign inMail the bench
H2 Tech Systems
Bench 05 / Data protection

You cannot govern a folder that nobody has located.

Two lines, in a strict order. Survey first: anything regulated or proprietary is located across endpoints and the shares behind them, and each machine collects a figure. Rule second: encryption over whatever turned up, plus a written list naming the channels cleared to carry it.

Actifile, on its ownSurvey, then ruleCounted per device
2 lines / survey first, rule second / counted per device
Cells on this bench2
KitActifile, on its own
UnitOne device
OrderDiscovery, then enforcement

The survey is the actual product

Data policy usually collapses at step one, and step one is not drafting the rule. It is knowing what the rule would land on. Endpoints, and the shares sitting behind them, get read for personal information and for card numbers. Each machine is then scored, and a vague unease becomes a table carrying numbers.

Numbers are what make the job finite. You start at the worst machine and work downward, rather than attempting an entire estate simultaneously and abandoning the attempt in the third week.

A survey turns unease into a table, and a table is the only version of the problem anybody finishes.

Rules applied to what the survey actually located

Encryption goes over the material discovery identified. Several compliance profiles can run at once, because a folder of drawings and a folder of payroll do not warrant the same handling and pretending they do produces a rule everybody circumvents.

Which applications may move data outward is named by channel control. That list is short, it is written, and it is read through with you before taking effect, displacing an arrangement which usually amounts to whatever happens to be installed.

Cells on this bench

Specifications and figures

Every figure below is taken from billing as this page loads. Whatever goes onto the tray remains there while you read on.

Fortify-DLP-ClassifyCell

Sensitive Data Discovery

Discovery and risk scoring, by Actifile

Survey before rule. Endpoints get read, along with the shares behind them, for personal information and for card numbers, and every machine collects a figure of its own. Anything still unlocated cannot be governed, only worried about.

  • Personal information located, card numbers located, right across the endpoints.
  • Vulnerability scanning and risk reporting taken machine by machine.
  • A score per device, which is what turns remediation into a queue.
Runs onWindows endpoints, plus whatever shares they reach
Reacts toRegulated or proprietary material resting in the wrong place
Shelved forAnyone obliged to answer what data they hold
Cleared byResults read through with you, then ranked
Assayed byCounted per device, each month
Weighingper device
charged monthly, in advance
QTY
Fortify-DLP-EnforceCell

Encryption and Channel Control

Encryption and channel policy, by Actifile

Survey converted into rule. What discovery located gets encrypted, compliance profiles get applied, and whichever applications may carry data outward get named on paper, not left to whatever people happened to install.

  • Encryption laid over the material discovery located.
  • Several compliance profiles, since one rule rarely suits a whole estate.
  • Named applications on the channels data uses to leave.
Runs onWindows endpoints already carrying the discovery line
Reacts toSensitive files taking a channel nobody sanctioned
Shelved forEstates answering to a regulator, a contract or an auditor
Cleared byPolicy settled with you before enforcement begins
Assayed byCounted per device, each month
Weighingper device
charged monthly, in advance
QTY
Honest scope

Where this bench stops

No bench in this catalog draws more overclaiming than this one does, which makes the boundary worth printing plainly.

  • Patterns are findable. Intent is not. Scanning recognises the shape of regulated data. A commercial secret written in ordinary sentences looks exactly like ordinary sentences, and deciding it matters is a judgement only your business can make.
  • Encryption does not decide who may look. It protects material at rest and in flight on the routes it governs. Who ought to have access at all is a policy question, answered by you, before any of this applies.
  • Entitled people can still take copies. Anyone allowed to open a file may quietly keep it. Remedies here run to a leaver procedure and a contract, and neither of those two installs.
  • Devices are what this counts. Reach extends to endpoints, together with whatever shares those endpoints open. Material living only inside some service nobody enrolled is outside the survey and outside the rule.
  • Compliance is not a purchase. This produces evidence and applies controls that a programme requires. The programme, the assessor and the paperwork stay firmly with you.
Label 01

Heads up: card statements show FORTIFY 24X7 - H2 Tech Systems is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.