Using Scans Dashboard

The Scans dashboard displays an overview of the scan results across your entire environment.

The Scans dashboard includes the following categories of reports (displayed within tiles in the user interface):

See below for more information:

SNAPSHOT View

Totals Overview

The Totals Overview displays data in tiles:

  • Average Target Scan Coverage - 30 days (by percentage)
    • Percent of all valid Targets in the Data Asset Inventory (DAI) that have been scanned in the past 30 days. 
  • Total Matches Remediated (out of total matches)
    • The number of sensitive data matches that have been remediated (quarantined, redacted, deleted, etc.) out of the total number of matches discovered (by all scans).
  • Average Time to manage matches (in days)
    • The average amount of time, in days, from when the match was discovered to when it was remediated (quarantined, redacted, deleted, etc.)

Scan Coverage By Target (last 30 days)

  • Chart Bars: Display the number of scans performed on different Targets (in the Data Asset Inventory (DAI)) in the past 30 days
    • The scan count for Targets displays in ascending order in the grid.
    • Click a Target - or its scan count - to display the Target Details screen.
  • Impact: Displays, at a glance, which Targets do not have proper coverage.

Top At-Risk Targets

  • Chart Bars: Displays a list of Targets most at-risk due to the amount of Unmanaged data they contain.

    • These Targets are noteworthy because they contain Unmanaged data.

    • Unmanaged data is data that is managed by your organization and not by a 3rd-party org such as AWS, Microsoft Azure, etc.

  • Impact: Displays, at a glance, which Targets do not have proper coverage and require attention due to the amount of Unmanaged data they contain, as well as the top three types of sensitive data contained in the Target.

  • Example

    • For example, data is that is stored on a local SQL server on a Windows 2012 machine that is no longer supported with security updates by Microsoft is considered Unmanaged data.

      • Such data is often unprotected/unencrypted

      • The data is known, but uncontrolled

      • No remediation actions (redaction, deletion, quarantine) have been applied to this data

      • The data is considered seriously at-risk and vulnerable to breaches, malware, and other security threats

Target Sort

Targets are sorted by:

  • Name - The name of the Target

  • Unmanaged Data (percentage) - What percent of the data on the Target sources (databases, servers, cloud locations, etc.) is Unmanaged data (this data has been identified, but no actions have been applied to it. It is uncontrolled data). Unmanaged data is more vulnerable to breaches, malware, and other security threats.

  • Top Data Types - The 3 most discovered types of Unmanaged data. For example, social security numbers, e-mail addresses, credit card numbers, etc.

Click the arrow to sort by ascending values, lowest value first, at the top.

Click the down arrow to sort by descending values, highest value first, at the top.

Matches by Classification

  • Chart Bars: Display sensitive data matches sorted by classification name as they are distributed across the various data locations in your environment (expressed as a percent % of whole):

    • None

    • Email

    • Database

    • File & Folder

    • Collaboration

    • Cloud

    • Website

  • Example: In the screenshot above, the data classification "14SepClassify" is found in three different locations within your scanned environment:

    • None (not found in any defined location): 4%

    • Database: 95%

    • Files and Folders: 1%

Sensitive Data Distribution

  • Chart Bars: Displays sensitive data types as they are distributed across the data locations in your environment (expressed as a percent % of whole):

    • None

    • Email

    • Database

    • File & Folder

    • Collaboration

    • Cloud

    • Website

  • Colors: Each data location (which contains sensitive data) is represented by a different color.

  • Impact: In the above example, Bank Account Numbers are found exclusively in the Files and Folders of machines in your local environment.

    Consider the following:

    • This may be expected behavior (you may wish to keep this data out of cloud sources).

    • You may wish to confirm this data has been redacted/quarantined or similar remediation action taken to ensure it is secure

    • You may wish to drill down and discover the distribution among local machines - is this data on one machine or several? Are these machines secure? Do they use proper password strength, etc.?

TRENDS View

Match Status

  • Chart Bars: What percent (%) of scanned content is stored on Managed or Unmanaged sources over time (by month).

  • Colors: Unmanaged data is shown in red. Managed data is shown in green.

  • Impact: An environment with a large amount of unmanaged data is at greater risk of data breach, malware, data loss and other security threats than an environment with managed data.

  • More information.

Managed Action Activity

  • Chart Bars: The percent (%) of various remediation actions performed on managed data sources over time (by month). These actions make your data more secure and reduce the risk of the sensitive data in your environment.

    • Actions include:

      • Access Restricted

      • Classified

      • Quarantined

      • Redacted

      • Script Executed

  • Colors: Each action on managed data is represented by a different color.

  • Impact: Remediation action on managed data are displayed over time (measured monthly) revealing changes in action activity. This is useful in understanding the trend of how remediation actions are being applied to your sensitive data.

  • More information about unmanaged vs managed data.

Aging Report for Unmanaged Sensitive Data

  • The age (in days) of all of the Unmanaged sensitive data in your environment.

    • Unmanaged data is at greater risk of security breach.

    • Data that is classified as Unmanaged should be addressed in a timely fashion. The older your unmanaged data is, the greater its risk.