Automation and Workflow

Vontu Data Loss Prevention automation and workflow capabilities from Symantec help customers convert visibility of data loss events into immediate action and reduction in risk with a minimal investment in headcount.

"We saw a 90% reduction in the number of data loss incidents 10 days after deploying automated sender notification."

- FORTUNE 100 Insurance Company
Vontu Customer

Requirements for successful automation and workflow

Remediation and Workflow
Click to enlarge

Once an organization has accurate information about a data loss event and exposed files, it must act on this information to gain results. In today's world of tightening budgets, automation and efficiency is essential to leverage existing resources. Critical data loss events need to be found and acted upon immediately before data leaves the company or in time to manage the consequences.

Vontu automation and workflow has the right features to ensure the right steps are taken after an incident is detected:

Right Automation: Take action immediately without user intervention

Block, encrypt, notify, copy, quarantine, or solicit user justification automatically without requiring administrator intervention. Automatically notify users in real time on the endpoint or through emails to promote awareness and user education. Create policies to set workflow into motion for high severity incidents and route it automatically to the person best equipped to deal with the problem.

Right Person: Delegate incident response to business units

Empower business units and data owners by distributing remediation responsibility of data loss incidents based on workflow status, policy or senders identity and directory information. Put the power with the people most knowledgeable and best equipped to fix the issue.

Right Order: Severity scoring for prioritization

Classify each incident automatically by level of severity and amount of data exposed to drive enforcement and remediation workflow. Keep attention focused on the most important events and overall resources of the team kept under control. Modify severity manually if required upon additional review.

Right Information: Incident triage for five-second remediation

Gain a complete snapshot of the incident, displaying all actionable information on a single screen, allowing the user to quickly diagnose and respond to incidents. This ensures the response team has the right tools to work at peak efficiency including:

  • User justification
  • Access control information
  • Match highlighting
  • Incident correlation
  • Complete message or file captured
  • Incident history
  • Corporate directory data.

Right Action: One-click smart responses to combine multiple actions

Save time and resources by using a single button that combines multiple remediation responses and status changes that are specific to your company's procedures and workflow. Ensure consistent remediation for each incident type.

Right Metrics: Prove results to executives and auditors

Measure risk reduction over time, benchmark business units on risk exposure, and report quarterly results to executives. Demonstrate proper controls to support audits and risk assessments.