Patent ID: 11880487
Assignee: COMMVAULT SYSTEMS, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC A  G

Claim 0:
1. A computer-implemented method performed by an information management system, the computer-implemented method comprising:
performing a data backup method of customer data stored on multiple primary storage devices, wherein a first primary storage device of the multiple primary storage devices is located at a first geographical location, and wherein a second primary storage device of the multiple primary storage devices is located at a second geographical location,
wherein the customer data stored at the first and second primary storage devices is hosted by different entities,
wherein the customer data comprises personal data requiring authorization for access,
wherein the data backup method is initiated according to a schedule that is indicated in an information management policy assigned to the customer data,
wherein the information management policy comprises a set of parameters for performing data management operations on data assigned to the information management policy,
wherein the set of parameters for performing data management operations comprises logical or virtual location information associated with the customer data and authorization access information needed to access the customer data;

acquiring the customer data by using the authorization access information indicated in the information management policy assigned to the customer data;
creating secondary copies of the customer data;
storing the secondary copies in secondary storage devices, wherein the multiple primary storage devices are separate and distinct from the secondary storage devices;
for each secondary copy of the secondary copies;
updating one or more indices mapping a storage location of the each secondary copy to a corresponding location of the customer data on one of the multiple primary storage devices, and
determining if the each secondary copy includes a specific type of the personal data;

wherein at least some of the secondary copies are stored in a backup format different from a primary format of the personal data that is stored at the multiple primary storage devices;
generating or updating a common index with information included in each created one or more indices corresponding to each secondary copy that included the specific type;
accessing the information within the common index;
using the accessed information, determining one or more of the multiple primary storage devices that store the customer data that includes the specific type;
determining a level of risk for each of the determined one or more of the multiple primary storage devices; and
in response to determining the level of risk for each of the determined one or more of the multiple primary storage devices:
identifying a predetermined response from an information management security policy specific to the specific type and the level of risk,
initiating the predetermined response with the corresponding each of the determined one or more of the multiple primary storage devices,
wherein the predetermined response is a computer-implemented operation for risk mitigation of the customer data appropriate for the determined level of risk.