CS Mar Apr 2022

compliance
ORGANISATIONS LOSE AN AVERAGE
OF $4 MILLION IN REVENUE, DUE TO
A SINGLE NON-COMPLIANCE EVENT.
(Saviynt.com - The True Cost of Non-
Compliance - MJ Kaufmann - Apr 2021)
WHAT SORT OF FINE COULD I FACE,
IF I AM NOT COMPLYING WITH GDPR
LAWS?
The UK GDPR and DPA 2018 set a
maximum fine of £17.5 million or 4%
of annual global turnover, whichever is
greater, for infringements while the EU
GDPR sets a maximum fine of €20 million
(about £18?million) or 4% of annual
global turnover, whichever is greater,
for infringements. (Legislation.gov.uk -
Relevant provisions of the Act - See
Sections 155 to 159, Part 6)
HOW HAS COVID-19 CHANGED THE
WAY THAT DATA IS MANAGED?
With all the disruptions from Covid-19,
businesses have had to quickly find new
ways of working. For many companies
around the world, remote working is
the new normal. With remote working,
businesses have had to figure out ways of
having their workforce collaborate and
work together, resulting in a significant
spike in organisations adopting the usage
of platforms like Microsoft Teams, Google
Workplace, Atlassian tools (Confluence,
Jira and Bitbucket), Alfresco, Slack…the
list is forever growing.
Collaboration is a truly wonderful thing,
but with this rise in collaborative tools
being adopted, key sensitive data is now
stored in even more places, making it
even harder for businesses to get a firm
grasp of how data is being shared
between their staff.
Not only have IT teams had to adopt
this new way of working, evaluate and
implement new tools to keep businesses
running, but they've also had to get
their heads around the complexities of
compliance regulations, which is no easy
feat. To many business leaders, IT teams
today are modern-day saints. The top
three skills for compliance officers are:
subject matter expertise, communication
skills and anticipating future regulatory
trends. With businesses only growing the
number of solutions they use, surely
staying on top of their data will become
an unmanageable task?
REGULATORS FINED BANKS $10
BILLION IN A 15-MONTH PERIOD
THROUGH 2019, WITH MOST OF
THOSE FINES CAUSED BY CYBER-
ATTACKS (60%) (Fenergo - Jan 24,
2020)
What if there was a solution that provided
a report highlighting exactly what GDPRrelated
data was being stored and where
it was stored? What if that solution was
able to scan not just one single instance
of a collaborative tool, but the entire
digital estate (CRMs, marketing tools,
sharing platforms, endpoints, fileservers)
and provide visibility into data stored
EVERYWHERE? Would that make the
unmanageable manageable? Having a
rich understanding of stored compliancerelated
data, across all tools and solutions
used inside a business, is the only way of
operating in line with ones regionalised
compliance regulations.
Stagnant budgets and a shifting
workforce have left many compliance
teams feeling stretched, with 87% of
businesses reporting that they have
no additional capacity, due to being
understaffed or only adequately staffed.
ENTER GEOLANG DATA DISCOVERY
The GeoLang Data Discovery tool has
been created to help organisations
confidently operate within the compliance
regulations they must follow by scanning
their digital estate (endpoints, fileservers,
Office 365, Google Workspace, Atlassian
Jira/Confluence/Bitbucket [data centre and
cloud] and Alfresco), providing a report
(The Hero Report) that highlights the
company risk profile, what sensitive data
has been found, where sensitive data has
been found, key risk areas, how current
risks have been mitigated, mean time to
resolution and the current risk exposure.
In all, 44% of businesses say that their
top compliance management challenges
are handling compliance assessments,
undergoing control testing, and implementing
policy and process updates.
(MetricStream State of Compliance Survey
Report 2021)
Generated at the touch of a button (or
delivered automatically), the high-level
Data Discovery Executive Summary
('HERO Report') provides configurable
and periodic reporting on risk assessment
and risk mitigation, as a dynamic report,
but also available in PDF or editable
format for distribution to managers. Userfriendly
dashboards are also available in
one central location.
Pre-defined and bespoke rule sets,
including GDPR, PCI, or HIPAA, are
supported, along with granular regular
expressions, keyword lists and compound
queries. GeoLang Data Discovery searches
unstructured datasets stored in over 200
formats across your digital estate and
with the 'find files similar to' function,
one can quickly build repositories from
dispersed business data.
To understand how GeoLang can help
simplify the management of data
compliance, help get your data ready for
a cloud migration/digital transformation
project or even ease how Digital Subject
Access Requests (DSARs) are managed,
you can check out the Geolang website
at: www.geolang.com. Alternatively,
contact the company by emailing:
contact@geolang.com.
www.computingsecurity.co.uk @CSMagAndAwards Mar/Apr 2022 computing security
17