Organizations are modernizing their infrastructure by migrating data to cloud storage, making it increasingly difficult to keep track of sensitive business data across hybrid environments. Shadow IT, and shadow data are cropping up unknowingly as users independently adopt technologies and Software- as- a- service platforms. This sprawl of sensitive, unknown data opens the opportunity for security vulnerabilities, such as expanded attack surface, increased chance of data loss, and siloed data management tools. To accurately protect sensitive data sprawled across multiple platforms, organizations must have a detailed view of their sensitive data, know where it resides, and its role within the organization- 

In our latest release of IBM Security Discover and Classify, we have expanded on our discovery and classification capabilities to now offer an attack surface reduction dashboard, scanning capabilities for large unstructured documents, comprehensive coverage of new data sources, broader integrations, and more: 

Attack surface reduction (ASR) dashboard​

• IBM Security Discover and Classify help minimize your attack surface by categorizing and eliminating duplicated, unused, or no longer critical data to protect. It takes inventory of sensitive data throughout the ecosystem and uses tagging capabilities to classify risk assessments and generate context around data assets. ​It provides a view of the age of sensitive files and the last date modified to determine appropriate action. ​You can better address compliance and reporting requirements by only keeping necessary sensitive data and getting rid of old or useless records and files. 

Optical character recognition (OCR)​

• IBM Security Discover and Classify enables users to save time by reducing manual sorting or tagging, improving accuracy and data quality, and handling large volumes of data in unstructured documents. This includes allowing users to identify and catalog sensitive data in image-based documents such as .pdf or.jpg. 

Cryptographic secrets discovery​

• As quantum computers overpower modern encryption tools, organizations must determine which cryptographic algorithms need replacing. Using IBM Security Discover and Classify’s classification search function, users can quickly filter the cryptographic assets stored in their environment to determine which encryption tools are at risk, and inventory crypto assets, including keys, functions, and algorithms. Once inventoried, sensitive data is prioritized based on criticality to the organization. Users can export findings to the necessary tools- ServiceNow, SIEM, SOAR- to be remediated. 

Support for additional data sources ​

• Get a more complete and accurate understanding of your data environment by scanning structured, unstructured data sources and applications. IBM Security Discover and Classify offers comprehensive coverage of sources where sensitive data could reside, including paper documents. You can have visibility into discovery and classification scans - including statistics and results - for CIFS (SMB), NFS, Amazon S3, and Box. This enables the user to understand scan performance, how scan performance improves over time as the system learns, files that may have been skipped, total data scanned, and other descriptive statistics to illuminate IBM Security Discover and Classify’s performance.

New data sources for discovery​

• With expansive support of new data sources, IBM Security Discover and Classify provides data classification on DB2 on z/OS,  Azure: MySQL, Maria DB, PostgreSQL, Snowflake, HPE Nonstop, AWS SQL: MySQL, Maria DB, Oracle, PostgreSQL, SQL, IBM Informix, Oracle Exadata, Google BigQuery, Box, Apache Parquet (S3)​

New integrations ​

• Encryption with Titaniam, Configuration UI for Splunk​

To learn more about our latest IBM Security Discover and Classify release, join the webinar on Wed, Aug 23, 2023, at 9:30 AM EDT and hear from our experts!