Assured federated records management
View Patent ↗A record is managed by obtaining from an external system on which a stored object comprising the record is stored a property of the stored object as stored on the external system. A stored property associated with the record is compared with the obtained property of the stored object. In the event the comparison does not match, responsive action is taken.
1. A method for managing one or more records, comprising:
generating, at a management system, a plurality of proxy objects for a plurality of objects stored on one or more external systems;
selecting, based at least in part on a protection or compliance policy, one or more properties associated with at least one of the plurality of objects, wherein the selected one or more properties permit detection of violations of the protection or compliance policy;
storing, in one or more of the plurality of proxy objects, the selected one or more properties;
executing an integrity check process, wherein the executing of the integrity check process includes performing an integrity check on a subset of the plurality of proxy objects, the subset selected based at least in part on a percentage or number threshold of proxy objects, the performing of the integrity check including:
accessing the properties associated with the corresponding ones of the plurality of objects at the one or more external systems;
comparing, using a processor, the properties associated with the object the corresponding ones of the plurality of objects at the external system with the one or more properties stored in the corresponding proxy objects in the subset; and
determining whether the one or more properties stored in the proxy objects in the subset match the properties associated with the corresponding ones of the plurality of objects; and
in the event that the one or more properties stored in the proxy objects in the subset do not match the properties associated with the corresponding ones of the plurality of objects, taking responsive action.
2. The method of claim 1 , wherein the one or more stored properties are included in a set of record data configured to represent the corresponding stored object in a records management system configured to manage the one or more records.
3. The method of claim 1 , wherein the one or more external systems respectively correspond to systems other than a records management system on which the one or more records are located.
4. The method of claim 1 , wherein the one or more external systems not able to be configured to render the plurality of stored objects immutable on the external system.
5. The method of claim 1 , wherein a first record is associated with a first stored object that is associated with a first application and a second proxy object is associated with a second stored object that is associated with a second application.
6. The method of claim 1 , wherein a first record is associated with a first stored object on a first external system and a second record is associated with a second stored object on a second external system.
7. The method of claim 1 further comprising:
obtaining a schedule or frequency associated with processing the plurality of proxy objects;
using the obtained schedule or frequency to determine a first date and/or time at which to process a first subset of records, wherein the first exception log includes the first date and/or time; and
using the obtained schedule or frequency to determine a second date and/or time at which to process a second subset of records, wherein the second exception log includes the second date and/or time.
8. The method of claim 7 further comprising:
displaying at least the first date and/or time with an exception indicator in the event the first exception log contains at least one exception or a no-exception indicator in the event the first exception log contains no exceptions; and
displaying at least the second date and/or time with an exception indicator in the event the second exception log contains at least one exception or a no-exception indicator in the event the second exception log contains no exceptions.
9. The method of claim 8 further comprising:
receiving an indication associated with displaying the first subset of records associated with the first exception log; and
in response to the indication, displaying the first subset of records.
10. The method of claim 9 further comprising:
receiving a second indication associated with displaying exception log(s) in which a selected record from the first subset of records was processed; and
in response to the second indication, displaying information associated with the exception log(s) in which the selected record was processed.
11. The method of claim 1 , wherein the one or more stored properties include at least one of the following: a hash of the contents of the stored object, a permission associated with reading, a permission associated with writing or a permission associated with executing.
12. The method of claim 1 further comprising:
receiving an indication to display more information; and
in response to receiving the indication, presenting via the user interface the name of the property for which the content of the object at the external system and the property stored in the proxy object do not match.
13. The method of claim 1 further comprising:
receiving an indication to display more information; and
in response to receiving the indication, presenting via the user interface the content of the object at the external system and the property stored in the proxy object.
14. A system for managing a record, comprising:
a communication interface; and
a processor coupled to the communication interface and configured to:
generate a plurality of proxy objects for a plurality of objects stored on one or more external systems;
select, based at least in part on a protection or compliance policy, one or more properties associated with at least one of the plurality of objects, wherein the selected one or more properties permit detection of violations of the protection or compliance policy;
store, one or more of the plurality of proxy objects, the selected one or more properties;
execute an integrity check process, wherein the executing of the integrity check process includes to perform an integrity check on a subset of the plurality of proxy objects, the subset selected based at least in part on a percentage or number threshold of proxy objects, the performing of the integrity check including:
accessing through communications sent via the communication interface the properties associated with the corresponding ones of the plurality of objects at the one or more external systems;
comparing the properties associated with the corresponding ones of the plurality of objects at the external system with the one or more properties stored in the corresponding proxy objects in the subset; and
determining whether the one or more properties stored in the proxy objects in the subset match the properties associated with the corresponding ones of the plurality of objects; and
in the event that the one or more properties stored in the proxy objects in the subset do not match the properties associated with the corresponding ones of the plurality of objects, taking responsive action.
15. The system of claim 14 , wherein the one or more stored properties include at least one of the following: a hash of the contents of the stored object, a permission associated with reading, a permission associated with writing or a permission associated with executing.
16. The system of claim 14 , wherein the processor is further configured to:
receive an indication to display more information; and
in response to receiving the indication, present via the user interface the content of the object at the external system and the property stored in the proxy object.
17. A computer program product for managing a record, the computer program product being embodied in a non-transitory computer readable storage medium and comprising computer instructions for:
generating, at a management system, a plurality of proxy objects for a plurality of objects stored on one or more external systems;
selecting, based at least in part on a protection or compliance policy, one or more properties associated with at least one of the plurality of objects, wherein the selected one or more properties permit detection of violations of the protection or compliance policy;
storing, in one or more of the plurality of proxy objects, the selected one or more properties;
executing an integrity check process, wherein the executing of the integrity check process includes performing an integrity check on a subset of the plurality of proxy objects, the subset selected based at least in part on a percentage or number threshold of proxy objects, including by the performing of the integrity check including:
accessing the properties associated with the corresponding ones of the plurality of objects at the one or more external systems;
comparing, using a processor, the properties associated with the corresponding ones of the plurality of objects at the external system with the one or more properties stored in the corresponding proxy objects in the subset; and
determining whether the one or more properties stored in the proxy objects in the subset match the properties associated with the corresponding ones of the plurality of objects; and
in the event that the one or more properties stored in the proxy objects in the subset do not match the properties associated with the corresponding ones of the plurality of objects, taking responsive action.
18. The computer program product of claim 17 further comprising computer instructions for:
receiving an indication to display more information; and
in response to receiving the indication, presenting via the user interface the content of the object at the external system and the property stored in the proxy object.