Identity Finder & SEE Update

Identity Finder logo, with picture of robotic dogHere’s an update on two ISG-recommended products that were introduced to the campus community this past semester: Identity Finder and Symantec Endpoint Encryption.


IDENTITY FINDER

Over 1.3 million pieces of PII (personally identifiable information) have been detected here at Brown by the scanning tool Identity Finder. This represents almost 700 scans performed on some 300 Endpoints (computers).  The high number of scans compared to the number of computers scanned indicates that follow-up scans were run after remediation efforts had been taken.

Here is a break down of what was found:

Pie chart of breakout of matches by type with numbers for each. These were by type and number of instances: Social Security Number - 1,034,204, Email Address - 20,445, Telephone Number - 19,566, Password - 10,682, Credit Card Number - 8,181, Bank Account Number - 5,538, Personal Address - 3,448, Date of Birth - 508, Drivers License - 48, Mother's Maiden Name - 5

And follow-up actions taken:

Pie chart with numbers of follow-up actions taken by those discovering PII, These were: Shred - 681,362, None - 264,727, Ignore - 99,817, Secure - 51,289, Quarantine - 2,629, Recycle - 2,592, Scrub - 209This is a great start: lowering the risk level for data breaches, protecting hundreds of instances of personal information, and bringing peace of mind, not only to these individuals but the CISO, Internal Auditors, and Office of Risk.

If you haven’t installed and run Identity Finder, you are encouraged to do so, particularly since you may find a few extra quiet moments now that summer has arrived.  PLUS, there’s a free version  available to install on your personal computers at home. Visit the Identity Finder page for more information and links to an FAQ and download pages.

SYMANTEC ENDPOINT ENCRYPTION

Man with a laptop on his lap sitting in an airport terminal waiting areaWhile Identity Finder is recommended for everyone at Brown, Symantec Endpoint Encryption (SEE)  is a full disk encryption solution targeted toward faculty and staff who use laptops containing Brown Restricted Information, especially those who are frequent travelers. Thus far, SEE has been installed on over two dozen laptops, but that number will grow considerably over the summer as an initiative gets underway to encrypt the laptops of users identified as most at risk.

To learn more about SEE and find out whether it might be right for you or someone else in your department/office/unit, read the SEE FAQ.

Posted in Safe Computing, Summer 2012 Edition | Comments Off