Too often technology solutions provide an overwhelming amount of data in formats that are not meaningful to the managers who have a critical need for the information. In the world of data security, the display of information in useful and actionable formats is even more critical due to the large amounts and differing types of sensitive information found at most large companies.
These companies need the ability to gather, aggregate, store and then mine the data to make decisions around where data is most a risk, where new threats may exist and what compensating controls need to be put in place. Reports are the translations of raw data into useful and actionable information. Digital Guardian’s flexible and configurable reporting engine provides the power needed to deliver actionable reports for security, business, operations and audit managers. Digital Guardian reporting delivers: - Aggregated, high level views of sensitive data usage and flow across the extended enterprise
- Drill down capabilities that enable users to quickly move through large amounts of data zeroing in on relevant information at the user, machine or individual file level.
- Both summarization and detailed views of application usage
- Custom query capabilities allowing for detailed auditing across the enterprise
- Automatically generated graphical analysis and history of all warnings and alerts
- Trend analysis of risks and threats involving data usage
Report Types
Digital Guardian offers the most comprehensive reporting engine and complete list of pre-defined report templates available. Beyond pre-defined reports, Digital Guardians also offers personalized reporting interfaces and custom query capabilities
Activity Reporting
Collected and aggregated data activity is stored in a fully integrated Digital Guardian SQL database, offering users the best performance and scalability while providing administrators with advanced reporting capabilities.
The Server processes all of the collected data from individual Agents and generates comprehensive reports that provide administrators with both high-level views of user activity, as well as a more granular, detailed views, which are useful for security audits and incident response.
Higher-level reports summarize data over time to reveal trends across users, groups, end point, networks, applications and media types so that risks associated with information usage and movement can be understood and documented. This breadth of reporting allows organizations to focus on the details of particular incidents as well as determine what general policies may be required throughout the enterprise to mitigate risk.
Archiving
In order to manage the large amounts of data usage records generated, Digital Guardian allows for the easy archiving and management of both bundle and expanded raw activity data based on data type and time. Built in archiving allows organizations to easily integrate Digital Guardian into their existing backup processes and disaster recovery plans. In addition, archived bundles can easily be restored and imported back into Digital Guardian to facilitate the review of past data when needed. Archived bundles can be imported into a separate non-production server to facilitate 3rd party investigations. Since each Agent uniquely signs each bundle, evidentiary integrity exists to show that the raw data from a particular Agent results in a particular set of events displayed in any activity report.
Forensic reporting and case management
Digital Guardian includes a fully integrated case management and forensic capability that enables the tracking of data usage by users and groups in order to targeted investigation. All the usage logs are in a tamper-proof evidence form (encrypted and digitally signed) and stored for future validation. Drill down reporting based on application, file type, network, user action, classification, encryption status, and type of device (desktop, laptop, terminal session).
| 
