Resolving Risks Discovered in Sensitive Data Governance Data Sources

Does not apply to: Database data sources. Database data sources support monitoring, but not resolving risks.

You can monitor objects in a data source and resolve issues related to potential risks. If your file system data source is a NetApp filer and you enabled monitoring, additional monitoring information is available: all users who accessed, modified, or renamed a file.

Use the Dashboard and Review tabs to take action on files for certain types of violations and risks of exposure, including the following:

• Retention not set: Files with backups that have no retention value set on the source data.

• Not protected: Files that are not backed up with a Commvault solution.

• Accessible By Everyone: Files that are accessible by everyone (open access).

• Personally identifiable information (PII) discovered in the contents of files.

While resolving a risk, you can create a request to inform a reviewer and an approver of the action you need to take.

Procedure

1. Open the data source Discover > Dashboard page.

   For instructions, see Viewing Data Source Dashboards.

2. Access the list of data source files by using one of the following methods:

   • To filter the files, in the appropriate tiles, click the type of data you want to work with, and then next to Dashboard, click Review.

     For example, to resolve risks for files that are not backed up and that have critical PII, in the Sensitivity tile, click Critical, and in the Files By Risks tile, click Not Protected.

   • To view all of the files for a data source, next to Dashboard, click Review.

3. Next to the documents that you want to resolve, select the check boxes.

   The risk and sensitivity information appears in the right-hand pane. If the data source is a Windows computer or a NetApp filer with monitoring enabled, file monitoring information from the past 60 days is also available in the right-hand pane.

4. In the upper-right of the page, click the resolution type that you want to perform, and in the resolution dialog box, set options specific to the resolution type.

   For information about the resolution types, options, and data source support, see Resolutions Available for Data Sources.

5. Choose which files to resolve:

   • To resolve the selected files, click Resolution_type n selected files.

     For example, if you have two files selected and you only want to delete those two files, click Delete 2 selected files.

   • To resolve all of the files in the data source, click Resolution_type all n files.

     For example, if you have 95 files in a data source and you want to ignore all of the files, click Ignore all 95 files.

6. Optional: To create a review request, move the Create review request toggle key to the right.

   Instead of performing the resolution immediately, a request is created and an email is sent to a reviewer and an approver.

7. Click Submit.

Related Topics

• Processing End-User Subject Access Requests (SAR)

• To create a file system data source that includes monitoring for NetApp filers, see Adding File System Data Sources to a Project.

• To view the file monitoring report, see Viewing File Monitoring Information.