ELIMINATING DATA SECURITY THREATS Presented by: Michael Hartman Varonis Systems. Proprietary and confidential.

ABOUT VARONIS Founded in 2004, started operations in 2005 Over 1800 Customers Over 4500 installations Offices on 6 continents Based on patented technology and a highly accurate analytics engine, Varonis solutions give organizations total visibility and control over their unstructured data, ensuring that only the right users have access to the right data at all times from all devices, all use is monitored, and abuse is flagged. VARONIS SYSTEMS. PROPRIETARY AND CONFIDENTIAL.

Data? What data? Varonis Systems. Proprietary and confidential.

650% growth in the next 5 years! UNSTRUCTURED DATA Varonis Systems. Proprietary and confidential. PERCENTAGE OF THE DIGITAL UNIVERSE Security-IntenseCompliance- Intense Preservation- Intense 0% 10% 20% 30% 40% 50% Source: IDC

Can IT answer? Who has access to this folder? Which folders does this user or group have access to? Who has been accessing this folder? Which data is sensitive? Who is the data owner? Where is my sensitive data overexposed? How do I fix it? Where do I begin? DATA EXPLOSION – ARE WE READY? 91% Lack processes for determining data ownership 76% Unable to determine who can access unstructured data Varonis Systems. Proprietary and confidential. + Data + Collaboration + Cross-Functional Teams + Security Requirements = MORE Containers MORE ACLs MORE Management SOURCE: PONEMON INSTITUTE MORE

SURVEY: 22% REPORTED A DATA BREACH Varonis Systems. Proprietary and confidential.

$7.2 MILLION PER BREACH Varonis Systems. Proprietary and confidential.

43% OF BREACHES BY “TRUSTED” INSIDERS Varonis Systems. Proprietary and confidential.

SECURE COLLABORATION MAXIMIZES VALUE Varonis Systems. Proprietary and confidential. Too much access Uncontrolled Collaboration No Access No Collaboration Maximum Value Negative Value (Damage) Correct Access Correct Auditing No Value

So, how do we protect our data? Varonis Systems. Proprietary and confidential.

DATA PROTECTION FLOW Authentication Users are who they say they are Authorization Users have access to only what they need Auditing Monitor actual access Alert On unusual activity Varonis Systems. Proprietary and confidential. Authenticati on Authorizatio n Auditing ALERT!

IF WE DO THAT… Access is controlled No one gets access to data who shouldn’t No data is exposed to people that shouldn’t see it Access is monitored No one can access data without it being logged Logs are inspected (with automation) Unusual activity is flagged Humans can investigate the right things Varonis Systems. Proprietary and confidential.

What might this look like? Varonis Systems. Proprietary and confidential.

PERMISSIONS - BI-DIRECTIONAL VISIBILITY Varonis Systems. Proprietary and confidential.

AUDIT TRAIL Varonis Systems. Proprietary and confidential.

QUOTE FROM A CSO ON DLP “Yesterday I had one problem: where’s my sensitive data? Today I have 193,000 problems.” Varonis Systems. Proprietary and confidential.

ACTIONABLE DATA Varonis Systems. Proprietary and confidential. Sensitive Data Exposed Data Prioritized list of folders that should be addressed Top folders that contain a large percentage of sensitive data -AND- Have excessive/loose permissions Prioritized list of folders that should be addressed Top folders that contain a large percentage of sensitive data -AND- Have excessive/loose permissions

ACTIVITY ANALYSIS Varonis Systems. Proprietary and confidential. Most/Least Active Users Most/Least Active Directories Anomalous Behavior Most/Least Active Users Most/Least Active Directories Anomalous Behavior

RECOMMENDATIONS AND MODELING Varonis Systems. Proprietary and confidential.

HBR ON DATA OWNERS Varonis Systems. Proprietary and confidential. You don't manage people assets the same way you manage capital assets. Nor should you manage data assets in the same way you manage technology assets. This may be the most fundamental reason for moving responsibility for data out of IT.

DATA OWNERSHIP IDENTIFICATION Varonis Systems. Proprietary and confidential. Active Users

REPORTS – AUTOMATIC FOR OWNERS Varonis Systems. Proprietary and confidential. Permissions Activity

IMPROVING DATA SECURITY WITH AUTOMATION Data is accessible to only the right users Access is reviewed regularly Owners will be identified based on metadata, assigned, tracked & involved Permissions reports will be created and sent automatically User access is audited continuously User access is analyzed automatically Unused data is automatically moved or deleted Varonis Systems. Proprietary and confidential.

REDUCED RISK, BETTER PROCESS Varonis Systems. Proprietary and confidential. Trust Access is restrictedAccess is restricted Data owners identifiedData owners identified Owners Review AccessOwners Review AccessVerify Access AuditedAccess Audited Usage analyzedUsage analyzed Less will arrive at endpointsLess will arrive at endpoints

Free 30 day trial! Assess your company’s data security threats. Varonis Systems. Proprietary and confidential.