The next-gen DLP Risk Monitor now features a new tool in the form of report designed to proactively prevent data leaks to cloud services. The report structures data on user activity related to cloud storages, enabling more effective fine-tuning of security policies.
The system now offers advanced functionality for monitoring uploads to the cloud. It now automatically generates detailed summaries of files uploaded to cloud storages by users from corporate workstations. This enables information security specialists to quickly audit cloud usage and identify suspicious employee activity.
The Cloud Uploads report, available in AnalyticConsole, provides comprehensive statistics on the number and volume of files uploaded over a specified period, as well as the types of cloud services used. Cloud activity can be viewed for all users or filtered by selected individuals. The report also details how many times each employee uploaded files helping to detect unusually large or frequent uploads, identify behavioral trends, and uncover potentially risky patterns.
Based on this data, security officers can customize access policies. For instance, access to specific cloud storages or file-sharing platforms can be completely blocked. Security teams can also implement granular upload restrictions, allowing non-sensitive files – like corporate event photos – to be uploaded to Google Drive, while preventing documents containing trade secrets or personal data from being shared,” explained Sergio Bertoni, Lead Analyst at SearchInform.
To audit files already stored in the cloud and monitor employee interactions with them, our DCAP system FileAuditor integrates seamlessly with Risk Monitor,” he added.
Risk Monitor’s reports are intended to aggregate and structure data from multiple sources to address specific security goals. For example, the Cloud Uploads report consolidates data from the CloudController and HTTPController modules presenting it in a user-friendly and human-readable form.
Additional Reports Now Available in Risk Monitor
Several new reports have also been introduced recently, including:
ABOUT SEARCHINFORM
SearchInform is an information security and risk management product vendor as well as an MSS provider. The company's clients are more than 4000 companies in 20+ countries. Today, the team has products and services for comprehensive protection against insider threats at all levels of corporate information systems: FileAuditor (the DCAP class solution); DLP system with extended functionality; Risk Monitor (advanced platform for internal threat mitigation); SIEM system, IS outsourcing service.
Subscribe to our newsletter and receive a bright and useful tutorial Explaining Information Security in 4 steps!
Subscribe to our newsletter and receive case studies in comics!