Identification and visualization of top-risk objects
Methods, systems, and devices for data management are described. A data management system may determine risk levels for a plurality of computing objects. A risk level for a computing object is determined based on a respective quantity of elements comprising sensitive information within the computing object and a respective quantity of users with access to the computing object. The data management system may display the visualizations for a selected subset of computing objects in a user interface. The visualizations for the computing objects may be positioned within the user interface based on respective quantities of elements comprising sensitive information within the computing objects and further based on respective quantities of users with access to the computing objects. The user interface may be configured to receive a selection of a time period and reposition the visualizations of the computing objects within the user interface.
1 . A method of data management, comprising:
determining risk levels for a plurality of computing objects associated with a data management system, wherein a risk level for a computing object is determined based at least in part on a respective quantity of elements comprising sensitive information within the computing object and a respective quantity of users with access to the computing object;
selecting, for display, a subset of computing objects within the plurality of computing objects based on the risk levels for the plurality of computing objects; and
displaying visualizations for the selected subset of computing objects in a user interface, wherein:
the visualizations for the computing objects within the selected subset of computing objects are positioned along an x-axis within the user interface based at least in part on a first metric from a set of metrics and are positioned along a y-axis within the user interface based at least in part on a second metric from the set of metrics, wherein:
the set of metrics comprises the respective quantities of elements comprising sensitive information within the computing objects, and
the set of metrics further comprises the respective quantities of users with access to the computing objects, and
the user interface is configured to receive a selection of a time period and reposition the visualizations for the computing objects along the x-axis, the y-axis, or both within the user interface in response to the selection of the time period based at least in part on the selected time period being associated with different respective quantities of elements comprising sensitive information within the computing objects, different respective quantities of users with access to the computing objects, or both.
2 . The method of claim 1 , wherein displaying the visualizations comprises:
displaying a first type of visualization for computing objects that are associated with a change in risk level that satisfies a threshold amount of change within a threshold amount of time; and
displaying a second type of visualization for other computing objects.
3 . The method of claim 2 , wherein the first type of visualization comprises a different icon relative to the second type of visualization, a different color relative to the second type of visualization, a flashing icon, or any combination thereof.
4 . The method of claim 1 , wherein displaying the visualizations comprises:
displaying the visualizations within a set of visualization bands in the user interface, wherein a visualization band corresponds to a range of risk levels for the selected subset of computing objects.
5 . The method of claim 4 , wherein different visualization bands within the set of visualization bands comprise different colors, different shading patterns, or any combination thereof.
6 . The method of claim 4 , further comprising:
selecting respective boundaries for visualization bands within the set of visualization bands based at least in part on a distribution of risk levels for the selected subset of computing objects.
7 . The method of claim 4 , further comprising:
selecting a quantity of visualization bands for inclusion in the set of visualization bands based at least in part on a distribution of risk levels for the selected subset of computing objects.
8 . The method of claim 4 , wherein the user interface is configured to reposition the set of visualization bands in response to the selection of the time period based at least in part on the selected time period being associated with the different respective quantities of elements comprising sensitive information within the computing objects, the different respective quantities of users with access to the computing objects, or both.
9 . The method of claim 1 , wherein the plurality of computing objects comprises one or more databases, one or more files, one or more file systems, one or more storage systems, one or more virtual machines, one or more filesets, one or more volume groups, or any combination thereof.
10 . The method of claim 1 , wherein the sensitive information comprises personal identifiable information (PII), classified information, health information, or any combination thereof.
11 . An apparatus, comprising:
a processor;
memory coupled with the processor; and
instructions stored in the memory and executable by the processor to cause the apparatus to:
determine risk levels for a plurality of computing objects associated with a data management system, wherein a risk level for a computing object is determined based at least in part on a respective quantity of elements comprising sensitive information within the computing object and a respective quantity of users with access to the computing object;
select, for display, a subset of computing objects within the plurality of computing objects based on the risk levels for the plurality of computing objects; and
display visualizations for the selected subset of computing objects in a user interface, wherein:
the visualizations for the computing objects within the selected subset of computing objects are positioned along an x-axis within the user interface based at least in part on a first metric from a set of metrics and are positioned along a y-axis within the user interface based at least in part on a second metric from the set of metrics, wherein:
the set of metrics comprises the respective quantities of elements comprising sensitive information within the computing objects, and
the set of metrics further comprises the respective quantities of users with access to the computing objects, and
the user interface is configured to receive a selection of a time period and reposition the visualizations for the computing objects along the x-axis, the y-axis, or both within the user interface in response to the selection of the time period based at least in part on the selected time period being associated with different respective quantities of elements comprising sensitive information within the computing objects, different respective quantities of users with access to the computing objects, or both.
12 . The apparatus of claim 11 , wherein, to display the visualizations, the instructions are executable by the processor to cause the apparatus to:
display a first type of visualization for computing objects that are associated with a change in risk level that satisfies a threshold amount of change within a threshold amount of time; and
display a second type of visualization for other computing objects.
13 . The apparatus of claim 12 , wherein the first type of visualization comprises a different icon relative to the second type of visualization, a different color relative to the second type of visualization, a flashing icon, or any combination thereof.
14 . The apparatus of claim 11 , wherein, to display the visualizations, the instructions are executable by the processor to cause the apparatus to:
display the visualizations within a set of visualization bands in the user interface, wherein a visualization band corresponds to a range of risk levels for the selected subset of computing objects.
15 . The apparatus of claim 14 , wherein different visualization bands within the set of visualization bands comprise different colors, different shading patterns, or any combination thereof.
16 . A non-transitory computer-readable medium storing code, the code comprising instructions executable by a processor to:
determine risk levels for a plurality of computing objects associated with a data management system, wherein a risk level for a computing object is determined based at least in part on a respective quantity of elements comprising sensitive information within the computing object and a respective quantity of users with access to the computing object;
select, for display, a subset of computing objects within the plurality of computing objects based on the risk levels for the plurality of computing objects; and
display visualizations for the selected subset of computing objects in a user interface, wherein:
the visualizations for the computing objects within the selected subset of computing objects are positioned along an x-axis within the user interface based at least in part on a first metric from a set of metrics and are positioned along a y-axis within the user interface based at least in part on a second metric from the set of metrics, wherein:
the set of metrics comprises the respective quantities of elements comprising sensitive information within the computing objects, and
the set of metrics further comprises the respective quantities of users with access to the computing objects, and
the user interface is configured to receive a selection of a time period and reposition the visualizations for the computing objects along the x-axis, the y-axis, or both within the user interface in response to the selection of the time period based at least in part on the selected time period being associated with different respective quantities of elements comprising sensitive information within the computing objects, different respective quantities of users with access to the computing objects, or both.
17 . The non-transitory computer-readable medium of claim 16 , wherein the instructions to display the visualizations are executable by the processor to:
display a first type of visualization for computing objects that are associated with a change in risk level that satisfies a threshold amount of change within a threshold amount of time; and
display a second type of visualization for other computing objects.
18 . The non-transitory computer-readable medium of claim 17 , wherein the first type of visualization comprises a different icon relative to the second type of visualization, a different color relative to the second type of visualization, a flashing icon, or any combination thereof.
19 . The non-transitory computer-readable medium of claim 16 , wherein the instructions to display the visualizations are executable by the processor to:
display the visualizations within a set of visualization bands in the user interface, wherein a visualization band corresponds to a range of risk levels for the selected subset of computing objects.
20 . The non-transitory computer-readable medium of claim 19 , wherein different visualization bands within the set of visualization bands comprise different colors, different shading patterns, or any combination thereof.