Solution Flyer

Mitigating Risk with Voltage Fusion
Data Security Platform
High-value and sensitive data are what drive your business, but they increase yourrisk as well. Organizations need a holistic view of risk across both unstructured andstructured data repositories to address how best to protect their “crown jewels.”
Voltage Fusion Solution at a Glance
Voltage Fusion helps organizations
quickly find, protect and securesensitive and high-value data.
DetectLeverage AI-driven analytics to identify
sensitive data and its associated risk

Protect
Automated actions reduce risk and protect
highly sensitive data, consumer trust,and corporate reputation

EvolveUnderstand your organization’s data
security and take action from one
data security platform

Discovering and Protecting
Sensitive Data

Data privacy has become a social movement
and has grown beyond regulations andguidelines organizations need to follow toprotect their data. As a result, the expectationsof personal data privacy for your customers,
employees, and others your business interacts
with are now the norm. Customer data,
intellectual property, and other corporate dataneed to be protected—in transit, in use, and atrest. Content analysis and data discovery candrive key business decisions, while improved
insight helps protect critical business data,
reducing risk while enabling secure information
sharing—building a foundation for better risk
management and privacy practices that build
trust with customers.

Understanding Data
Connect to Data Repositories
To protect data, you must first understandwhere your risky data resides. Unstructured
data repositories have long been a culprit
for redundant, out-of-date, and trivial data—taking up space and the IT resources tomanage the sprawl. Cloud-based file andobject stores have become the modernday equivalents as many organizations are
simply moving the problem to the cloud.
Without the appropriate level of controls
and protection, structured applications anddatabases can grow and add further risk,
if left unsupervised. Connecting to disparate

data repositories to evaluate the underlying
risk across your ecosystem on-premises
and in the cloud is a crucial step towards
protecting data.
PII Detection—Understanding Context
Detecting personally identifiable information(PII) and personal information (PI) is at the coreof protecting sensitive data. With over 80%
of data being unstructured, the challenge
shifts from simply detecting sensitive datato accuracy, confidence, and reducing false
positives. Simple pattern matching will not beadequate in tackling today’s data discovery
workloads. You will need to understand,
not only that a pattern match exists, but thatthe context of that pattern along with thecontents of the document or file indicatesthat it is a “true” positive and should beprotected. Context is critical to identifying
sensitive data.
Analyzing Structured Data
PII can also be found in structured
databases. Special attention needs tobe paid to structured data contained indatabases. Organizations need to identify
all the structured data repositories that
contain personal information, including any
older, legacy databases that may no longer
be active. Likewise, organizations need toexamine the data flows between structured
systems, both within the company as wellas outside to third parties.

Mitigating Risk with Voltage Fusion Data Security Platform

Analyzing Unstructured Rich MediaIn many organizations, risky and sensitive
data is not just present in emails, documents,
and the rows and columns of businessapplications, but exists in rich media files
like audio recordings, images, and videos.
Our work environments have been forced tosupport remote work and improve productivity.
As a result, video conferencing, especially inindustries like healthcare, education, andtelecommunications, have seen a huge
spike in growth of rich media formats.
Protecting privacy and being able to identify
where sensitive data is present inside richmedia files is increasingly important. The ability
to detect and appropriately mask personal
data (e.g., credit card information captured
during a call center recording, a passport
photo scanned by an airline, or CCTV footageoutside public space) used by the business,
protects the business from fines andreputation loss, as well as the customer
data from possible personal data leaks.
Voltage Fusion Solutions Help
Understand Your Data, Mitigate Risk
Privacy and protection are becoming acompetitive advantage for businesses withthe right approach. If organizations candemonstrate that they have developed a risk
management and privacy practice built on
protecting customer data and establishingtrust, it can become a very compelling
differentiator to harness for the business.
Voltage Fusion by OpenText™ helps establish
the foundation of these practices by
understanding risk in the most common
unstructured repositories on-premises
and in the cloud including:• NT file shares• SharePoint• Microsoft Exchange• OpenText™ Content Manager• Office 365• SharePoint Online

Protecting Your Data

• OneDrive

Remediating Access to Data
Ensuring data has appropriate permissions
applied and is secured can be challenging
due to several factors, especially the growthof data. During data discovery activities
finding data that is misplaced, or overexposed is commonplace. Users havenever really been reliable for filing data into
the appropriate folder, location, or content
management system—and, as a result,data containing sensitive, or personal data
can sit over-exposed out on the network or
public cloud. The ability to pinpoint wheresensitive data is, report on permissions,and remediate data security controls is a
powerful tool to protecting and governing
access for data in use.

• Google Drive• Azure files• Amazon S3• OpenText™ Documentum• OpenText™ xECM
• OpenText™ Core Content• JIRA• Confluence• Additional connectors and custom ingest
REST APIFor structured applications and databases
Voltage Fusion supports:• SQL• NoSQL• Oracle• Oracle eBusiness Suite• PeopleSoft• SAP• JDEdwards• Any JDBC compliant data source
Voltage Fusion supports PII detection
across unstructured and structured data
along with rich media analysis of images,audio, and video files. Our context-sensitive andaware grammars support over 39 languages
and economic region entity-types in supportof identifying data in support of data privacy(GDPR, CCPA, PIPEDA, POPI, KVKK), as well
as PCI and PHI.
Voltage Fusion goes beyond simple datarisk scoring to connect data discovery andclassification to understand the potential
financial impact to the business that could
result from cybersecurity breach and privacy
non-compliance, based on industry accepted
costs of breach, fines, and other damages.

Protecting Data in Use
Protecting data-in-use can be complex.
Data must be shared for the business tofunction. Team members need to collaborate,
combine data sets and work on sensitive
data together, securely. As a business, yourorganization needs to define and manage
these interactions through data protection
policies. Data protection policies help ensure
secure sharing and collaboration. Data must
be protected based on role and businesspurpose (to access it), and activities suchas print, attach to email, cut and paste, etc.,
should be blocked where necessary toreduce the proliferation of sensitive data.
Shifting towards Test Data Management
The proliferation of sensitive data can also
be caused by application testing, quality
assurance, and training. Real-world data
has long been used to ensure the correct
behavior of business applications before itis pushed into production. With increased
privacy regulations, many organizations are
moving away from using real-world data toreduce risk. Recently the market has shifted
towards test data management.

2Mitigating Risk with Voltage Fusion Data Security Platform

Test data management enables data
privacy and protection in non-production
and production environments by anonymizing
the application data during testing. This is aprocess of rendering completely new data
sets that look and act like real-world databut ensures no real customer or sensitive
data is present. This is very appealing for
applications that capture and store personaland sensitive data such as credit card
information, health information numbers,
names, addresses, and phone numbers.
This approach also streamlines the pipeline
between development, test and production,
driving greater efficiency inside yourIT organization.
Secure Data Analytics and Anonymization
Among the massive volumes of data
captured and consumed by organizations
is sensitive data that, if stolen, or breached,
can result in regulatory fines, sanctions,reputation loss, and other significant conse­
quences to the business. Combine thiswith the use of big data, and the rise ofanalytics in the cloud, the inherent risk
exposure is exponentially more dangerous.
With enterprises capturing personal
information, intellectual property, healthinformation, and more new classes ofsensitive data than ever before, information ina data lake can form toxic combinations that
present significant risk to the organization.
Organizations need to minimize the risk
associated with secure data analytics
while ensuring analysts can still safely andsecurely run queries and reports on trends
and business patterns. At the same time,they need to ensure the approach will also
help comply with data privacy regulations
and risk mitigation around a data breach.
Voltage Fusion Solutions Help
Protect Your Data, Manage Risk
Voltage Fusion solutions support risk
management and data privacy practices thatbuild trust around how data is accessed,
used, and protected. By enabling rights
permissions reporting and remediation,
along with transparent file encryption
Voltage helps protect your data fromunauthorized use and ensures secure
information sharing.
For structured data, Voltage Fusion
solutions support application retirement andarchiving, in place data masking, test datacreation, Format Preserving Encryption (FPE)
supporting data privacy readiness, test data
management, and secure data analytics.
These capabilities not only help protect thedata inside the applications that run yourorganization, but they also ensure that when
the data is being used to support and growthe business, it is done with privacy andrisk management practices built-in.

Voltage Data Privacy and Protection

Voltage Data Privacy and Protection solutions
help organizations find, secure and protect
their data. Our portfolio includes:
Voltage Fusion
Voltage Fusion’s data discovery solution
enables organizations to quickly find, secure,and protect sensitive and high-value data.
Voltage Fusion provides complete visibility andinsight across structured and unstructured
data silos, helps contain data management
costs while delivering actionable analytics
that improve efficiency, data quality, anddata privacy compliance. Contextually aware,
AI-driven grammars reduce false positives
and quickly identify high-value assets (e.g.,contracts, intellectual property, patents, etc.)
personal and sensitive data types (e.g., PI/PII, PCI, PHI, etc.). Voltage Fusion supports
transparent file encryption policies for dataprotection along with litigation hold and longterm retention management to meet data
preservation requirements.

Voltage Structured Data Manager (SDM)
Voltage Structured Data Manager (SDM)
enables the complete management ofstructured data across its lifecycle. SDM
enables policy-based disposition of data,defining archival, protection, deletion or any
other disposition based on pre-set company
policy. SDM performs all that through a userfriendly interface that allows structured data
to be managed throughout the enterprisefrom a single pane of glass. For test data
management (TDM), SDM can generatecontextual “fake” data to be used for testing,training, and quality assurance where they
do not need privileges to see the real data.
SDM supports multiple mechanisms toprotect data for these use cases including:• Format-Preserving Encryption (FPE)• Format-Preserving Hash (FPH)• Random Generation of Meaningful Values(RGMV)• Random Generation of Meaningful Unique
Values (RGMUV)• Random Mapped Generation of Meaningful
Values (RMGMV); and,• Random Mapped Generation of Meaningful
Unique Values (RMGMUV) which masks
sensitive data contained in text, comments
and notes, or any custom transformation.
Voltage SecureData
Voltage SecureData Enterprise by OpenText
provides an end-to-end data-centric approachfor enterprise data protection. By leveraging
Voltage For­mat Preserving Encryption (FPE)by OpenText, Format-Pre­­ser­ving Hash (FPH),
Secure Stateless To­ken­iza­tion, and Stateless
Key Management, Voltage SecureData
Enterprise protects sensitive structured
data over its entire lifecycle—from the point
at which it’s captured and throughout its
movement across the extended enterprise,
without gaps in security. Voltage SecureData
Enterprise “de-identifies” data, rendering it
useless to attackers, while maintaining its

3

“Voltage Data Discovery solutions allowed us to effectively
find and understand our data risk. The insights we foundfrom the analysis were invaluable in taking effective
actions to protect our data and monitor it going forward.”
Kadir Yildiz
CISO
Turkish Airlines

usability and referential integrity for dataprocesses, applications, and services.
Voltage SecureData Enterprise enables theadoption of a continuous data protection
model wherever data flows, in analytic
platforms and applications in hybrid multicloud environments and native cloud-services.
Voltage Data Access Governance
Voltage Data Access Governance (DAG)
by OpenText is is a solution that adopts anidentity-centric approach to safeguarding
sensitive unstructured data. With Voltage
DAG, organizations can establish accesspolicies that align with specific roles,
guaranteeing that only authorized users
with appropriate roles can access datawhen needed. Voltage DAG offers acomprehensive set of features includingchange notifications, lifecycle management,
security lockdown, and security fencing.
Voltage DAG includes reporting capabilities
enabling network administrators to easily
identify enterprise data that needs to moved,secured, retired, and more.

Connect with Us
www.opentext.com

Voltage Database Activity Monitoring
Voltage Database Activity Monitoring (VDAM)
by OpenText is a powerful solution that tracks
and monitors all database activities within
an organization. VDAM actively monitors
databases in real-time and promptly generates
alerts for any policy violations. VDAM works
with many database management systems(DBMS) Oracle DB, Microsoft SQL, IBM DB2,MongoDB, MySQL, and many more. VDAM’smonitoring capabilities encompass a wide
range of activities, including databaseadministrator actions and applicationtransactions such as data manipulation (DML),
schema modifications (DDL), access control
changes (DCL), and transaction control (TCL).
By leveraging VDAM, organizations canidentify databases that can be retired andgain insights into applications interactingwith sensitive data to help improve privacy
posture, increase observability on how
and where data is used—enabling fasterIT modernization and supporting green-ITand sustainability efforts.

OpenText Cybersecurity provides comprehensive security solutions for companies and partners of all sizes. From prevention, detection and response to recovery, investigation and compliance,
our unified end-to-end platform helps customers build cyber resilience via a holistic security portfolio. Powered by actionable insights from our real-time and contextual threat intelligence,
OpenText Cybersecurity customers benefit from high efficacy products, a compliant experience and simplified security to help manage business risk.
761-000047-006 | O | 10/23 | © 2023 Open Text