A Fortify 24x7 brand. Security controls built for firms the Safeguards Rule applies to.Account sign inAsk an engineer
Equity IT Solutions
Register 05 / Data safeguards

A folder nobody has located is a folder nobody can encrypt.

Practices in this industry accumulate client records the way a house accumulates paper. Returns sitting in a downloads folder, account numbers inside an old spreadsheet, a scan of a driving licence somebody mailed over in 2019. Locating comes first for the plain reason that no safeguard reaches a file nobody has found, and a risk assessment drafted without that picture is drafted from imagination.

ActifileLocate firstEncrypt and restrict
2 entries / locate then restrict / scored machine by machine
Entries here2
UnderneathActifile
Billed againstEach device
Order of workLocate first, restrict second

What the scanning actually returns

Actifile reads the workstations and the shares, then reports which category of regulated material is present, how much of it sits there, and which machines carry the heaviest share. This is not a keyword hunt: account numbers, tax identifiers, and government identifiers are recognised by their structure.

The output that changes anybody's behaviour is the figure per machine. It converts an abstract worry into an ordered queue, and the queue is nearly always shorter than a practice expects. Four machines usually carry the bulk of it, and those four are where the first week of work belongs.

Four machines usually carry the bulk of it, and those four are where the first week of work belongs.

Restriction, and why it arrives second

Once the picture exists, the second entry encrypts what was located and narrows the routes it can travel down: removable media, upload destinations, and the everyday channels that carry a file out of a building without anybody having decided to send it.

Switching restriction on before anything has been located is how a practice ends up with an office unable to work and a safeguard disabled inside a week. The two are sold as separate entries for that reason, and we will suggest running the first for a month before you buy the second.

A figure your insurer will actually accept

Exposure scoring produces a number describing what is held and where it sits. Practices put it into cyber insurance applications and into reporting for partners, because it beats an assurance that data is looked after by a considerable margin.

The obvious caveat belongs here too. It is an estimate produced by a scanner and not an audited valuation, and anybody presenting it as more than that has overreached.

Entries on this register

Specification and rate for each one

Rates below are read live from the billing service. Anything you record sits on your order sheet while you carry on reading the rest of the register.

Fortify-DLP-ClassifyRate and detail

Sensitive Data Discovery

Locate the regulated records first. Which machines hold them, which category they fall into, how many there are, and which pieces of hardware carry enough to deserve attention this month.

Actifile reading, sorting, and scoring whatever turns up
  • Reads workstations and the shares they can reach for structured records.
  • Recognises account numbers, tax identifiers, and government identifiers.
  • Produces an exposure figure per machine, converting worry into a queue.
  • Reporting fit for an insurance application or a partners meeting.
  • Reads again on a calendar, because the picture shifts every single week.
Supplied byActifile
Where it looksWorkstations and the shares those workstations reach
How it recognisesBy structure, rather than by keyword lists
What comes outA record inventory with a figure for each machine
How oftenContinuously, with rescanning against a calendar
Charged againstEach device, every month
Readingper device
collected monthly, ahead of the period
UNITS
Fortify-DLP-EnforceRate and detail

Encryption and Channel Control

The restricting half. Encryption applied to whatever the first entry located, and narrowing of the routes those records are able to travel out along.

Actifile encrypting what was located and narrowing where it goes
  • Encryption applied to the records identified, in the place they already sit.
  • Removable media rules, so a memory stick stops functioning as an exit.
  • Narrowing of upload destinations and the usual channels files leave through.
  • An alert raised whenever regulated material moves somewhere unexpected.
  • Built on top of the locating entry, and dependent on it having run first.
Supplied byActifile
Depends onThe locating entry, run beforehand
EncryptionApplied to identified records where they already sit
Routes narrowedRemovable media and upload destinations
AlertingRaised when regulated material moves unexpectedly
Charged againstEach device, every month
Readingper device
collected monthly, ahead of the period
UNITS
Honest scope

Exactly what this register does and does not reach

Two columns, both of them written to be relied on. The right hand column is the one worth reading twice, because a firm that misreads it will believe an obligation is covered when it is still open.

What is included

  • Reading of enrolled workstations and whichever shares those workstations reach.
  • Sorting of structured regulated records, with counts and locations attached.
  • Exposure expressed as a figure per machine, updated as the picture underneath shifts.
  • Encryption of identified records wherever the restricting entry is held.
  • Removable media and upload restriction on enrolled hardware.
  • Reporting fit to hand an insurer, a partners meeting, or an examiner.

What is not included

  • Any ruling on whether your handling of a record is lawful. Your counsel does that.
  • Reading systems nobody enrolled, or cloud platforms carrying no agent of ours.
  • Stopping an authorised person misusing a record they are entitled to open.
  • Retention scheduling and lawful destruction timetables. Those are programme work.
  • Certainty. A scanner finds what it recognises, and none of them recognise everything.
  • Your written risk assessment. This feeds evidence into it and goes no further.
BILLING ENTITY

Heads up: card statements show FORTIFY 24X7 - Equity IT Solutions is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.

Equity IT Solutions raises no separate charge of its own, so a second line will never turn up beside that one.