Information management security health monitoring system
An information management security health monitoring system is provided herein that can monitor the security health of one or more information management systems, identify any security issues that are occurring within an information management system, and automatically, or in response to a user input, transmit an instruction to the information management system to execute a workflow to resolve the security issue(s). For example, the information management cell health monitoring system receives security data and security policies, and/or similar data from an information management cell(s) via a network. The information management security health monitoring system analyzes the received information to identify any issues. If an issue is detected, the information management security health monitoring system retrieves workflows and determines whether any of the workflows can be used to resolve the detected issue. The information management security health monitoring system transmits a workflow that resolves the detected issue to the information management system for execution.
1. An apparatus comprising:
a first computing device having one or more hardware processors, comprising an information management security health monitoring system and in networked communication with at least a first information management cell, the information management security health monitoring system configured with computer executable instructions that, when executed, cause the information management security health monitoring system to:
receive information management security health information of the first information management cell from a storage manager implemented on a computing device of the first information management cell;
process the information management security health information to identify a security health risk associated with the first information management cell;
identify a recommendation to harden one or more components within the first information management cell to reduce the security health risk associated with the first information management cell;
compare data associated with a plurality of workflows, wherein the data identifies one or more issues to be resolved by each of the plurality of workflows;
identify, based on the comparison, a workflow of the plurality of workflows, that when executed by a computing device, causes hardening of the one or more components to reduce the security health risk for the first information management cell; and
cause display of a link, that when actuated by a user, causes execution of the workflow to harden the one or more components.
2. The apparatus of claim 1 , wherein the information management security health monitoring system transmits instructions to the storage manager to execute the workflow.
3. The apparatus of claim 1 , wherein the information management security health monitoring system is configured with further computer executable instructions that, when executed, cause the information management security health monitoring system to identify a second workflow that implements operations comprising at least one of:
enabling two-factor login into the first information management cell;
enabling single sign-on into the first information management cell;
enabling different levels of password complexity for access into the first information management cell;
enabling a limit on a number of password login attempts into the first information management cell;
enabling a timeout period for accessing a graphic user interface;
enabling secure mount path for media agents in the first information management cell;
enabling blacklisting by the first information management cell; and
enabling API usage logging in the first information management cell.
4. The apparatus of claim 1 , wherein the information management security health monitoring system is configured with further computer executable instructions that, when executed, cause the information management security health monitoring system to identify a second workflow that implements operations comprising at least one of: deleting mount path authorization, deleting job authorization, deleting storage policy authorization, restoring request authorization, and deleting backup set authorization.
5. The apparatus of claim 1 , wherein the information management security health monitoring system further comprises a security health policy.
6. A computer-implemented method for monitoring information management cell security health, the computer-implemented method comprising:
receiving, by an information management security health monitoring system comprising one or more hardware processors, from a storage manager implemented on a computing device of an information management cell, information management security health information;
processing by the information management security health monitoring system, the information management security health information to identify a security health risk associated with the information management cell by comparing the information management security health information with information management security health information in a security health data store;
identifying a recommendation to harden one or more components within an first information management cell to reduce the security health risk associated with the information management cell;
comparing data associated with a plurality of workflows, wherein the data identifies one or more issues to be resolved by each of the plurality of workflows;
identifying by the information management security health monitoring system, based on the comparing, a workflow of the plurality of workflows, that when executed by a computing device causes hardening of the one or more components to reduce the security health risk for the information management cell; and
causing display of a link, that when actuated by a user, causes execution of the workflow to harden the one or more components.
7. The computer-implemented method of claim 6 , wherein the information management security health monitoring system identifies the recommendation to reduce the security health risk associated with the information management cell.
8. The computer-implemented method of claim 6 , wherein the information management security health monitoring system transmits instructions to the storage manager in the information management cell to execute the workflow.
9. The computer-implemented method of claim 6 , further comprising identifying a second workflow, wherein the second workflow comprises at least one of:
enable two-factor login into the information management cell;
enable single sign-on into the information management cell;
enable different levels of password complexity for access into the information management cell;
enable a limit on a number of password login attempts into the information management cell;
enable a timeout period for accessing a user interface;
enable secure mount path for media agents in the information management cell;
enable blacklisting by the information management cell; and
enable API usage logging in the information management cell.
10. The computer-implemented method of claim 6 , wherein the workflow comprises at least one of: delete mount path authorization, delete job authorization, delete storage policy authorization, restore request authorization, and delete backup set authorization.
11. The computer-implemented method of claim 6 , wherein the information management security health monitoring system further comprises a security health policy.