Real time pivoting on data to model governance properties
Real time pivoting on data to model governance properties is provided. A data explorer module of a security and compliance service may analyze data, metadata, and activities associated with a tenant or a hosted service to understand the data, identify uncategorized data, and determine applicable policies and/or remediation actions in case of sensitive data that may need protection. The data may be stored and managed by a data insights platform which may enable query-based analyses on correlated, multi-stage evaluated data. Thus, the data may be analyzed, additionally, considering metadata, activities associated with the data, etc. In addition to the data, metadata, and activities, the data explorer module may receive information associated with existing classifications, properties, access, and applied policies. Upon evaluation of the data based on the received/stored factors, the data explores module may identify the data and determine applicable policies or actions.
1. A computer-implemented method to model governance properties, the method comprising:
receiving, a label of data stored in a storage structure, the label indicating a subject matter of the data;
receiving access information, wherein the access information comprises an indicator of at least one selected from a group consisting of:
a storage location of the data,
a location of a client device configured to access the data,
an identity of a client device configured to access the data, and
a sharing indicator of whether the data is shared internally or externally;
automatically determining a suggested policy governing how a client device is authorized to interact with the data, the determining based on
the data,
the label, and
the access information;
causing presentation of the determined suggested policy through an actionable visualization; and
in response to receiving a selection of the actionable visualization, automatically applying the suggested policy to the data.
2. The method of claim 1 , further comprising:
receiving metadata associated with the data; and
considering the metadata in the determining of the suggested policy.
3. The method of claim 1 , wherein the data comprises one or more of a document, a communication, and non-document content.
4. The method of claim 3 , further comprising receiving information associated with one or more casting policies already applied to the data.
5. The method of claim 1 , wherein automatically determining the suggested policy further comprises:
detecting, a pattern associated with the data and a usage of the data;
deriving an insight for an applicable policy based on the pattern; and
causing presentation of the applicable policy as the suggested policy for the data based on the derived insight.
6. The method of claim 5 , further comprising:
tailoring the suggested policy based on a tenant profile, wherein the tenant profile includes one or more of an industry, a size, a geographical location, a hosted service ecosystem, a role, a regulatory requirement, and a legal requirement associated with the tenant.
7. The method of claim 1 , further comprising:
providing the determined suggested policy governing how a client device is authorized to interact with the data of the data to one or more of a security and compliance service.
8. The method of claim 1 , further comprising:
monitoring changes to the data and the label and the access information for the data;
creating a performance report based on the monitoring; and
re-evaluating the suggested policy governing how a client device is authorized to interact with the data of the data based on the performance report.
9. A server configured to model governance properties, the server comprising:
a memory configured to store instructions; and
one or more processors configured, via execution of the instructions, to:
receive a label of data stored in a storage structure, the label indicating a type of sensitive data included in the data;
receive access information, wherein the access information comprises an indicator of at least one selected from a group consisting of:
a storage location of the data,
a location of a client device configured to access the data,
an identity of a client device configured to access the data, and
a sharing indicator of whether the data is shared internally or externally;
automatically determine a suggested policy governing how a client device is authorized to interact with the data, the determining based on
the data,
the label, and
the access information;
cause presentation of the determined suggested policy through an actionable visualization; and
in response to receiving a selection of the actionable visualization, automatically apply the suggested policy to the data.
10. The server of claim 9 , wherein the suggested policy includes a restriction of one or more of a delete action, a share action, a copy action, a move action, an anonymous link creation, a synchronization, a site creation, a created exemption, a permission modification, a purge of email boxes, a folder movement, a user addition, and a group addition.
11. The server of claim 9 , wherein the one or more processors are further configured to:
cause presentation of one of a new policy and a modified policy as the suggested policy.
12. The server of claim 9 , wherein the one or more processors are further configured to:
automatically determine a remediation action and implement the remediation action.
13. The server of claim 9 , wherein the one or more processors are configured to automatically determine the suggested policy further by:
detecting a pattern associated with the data and a usage of the data;
deriving an insight for an applicable policy based on the pattern; and
causing presentation of the applicable policy as the suggested policy for the data based on the derived insight.
14. A computer-readable memory device with instructions stored thereon to model governance properties, the instructions, when executed, configured to cause one or more computing devices to perform actions comprising:
receive a label of data stored in a storage structure, the label indicating a subject matter of the data;
receive access information, wherein the access information comprises an indicator of at least one selected from a group consisting of:
a storage location of the data,
a location of a client device configured to access the data,
an identity of a client device configured to access the data, and
a sharing indicator of whether the data is shared internally or externally;
automatically determine a suggested policy governing how a client device is authorized to interact with the data, the determining based on
the data,
the label, and
the access information;
cause presentation of the determined suggested policy through an actionable visualization; and
in response to receiving a selection of the actionable visualization, automatically apply the suggested policy to the data.
15. The computer-readable memory device of claim 14 , wherein the data includes one or more of a document and a communication, and the label and the access information is determined based on a content of the document or the communication.
16. The server of claim 9 , wherein the one or more computing devices are further configured to:
receive metadata associated with the data; and
consider the metadata in the determining of the suggested policy.
17. The computer-readable memory device of claim 14 , wherein the one or more processors are further configured to:
receive metadata associated with the data; and
consider the metadata in the determining of the suggested policy.