Helped a high profile client headquartered in Western Europe with a presence in over 20+ countries achieve the remediation of unstructured data hosted in their cloud and on-premise infrastructure.

We built a bespoke solution with the capability to identify, classify and delete data post lapse of the retention policy.

Result:

Implementing this solution will allow the client to take control of their data management strategy, with automatic classification and retention being applied to documents. In line with the regulations and legislation that are applicable to held data, the retention policies will allow sensitive information to be deleted where needed. In addition to this, the removal of these documents will significantly reduce the storage footprint required on both on-premise infrastructure and within cloud services. Using these automated classifications and rules, the overhead to IT should be reduced ensuring focus on other initiatives within the business.

The approach we delivered saved the client over £3 million annual recurring cost and confidence that they are able to comply with regulatory requirements. This potentially saves them up to 4% of their global revenue which runs into billions of pounds.

Managed the delivery of Pre 25^th May GDPR-compliance deliverables and the GDPR Improvement Stage 1 (post 25^th May deliverables that takes the bank to a targeted level of maturity)

Result:

Decrease Risks: ​
The bank can pinpoint where PII is being stored on the in-scope system/drives as well as determine the supporting processes and technologies against a defined control framework. This knowledge will help plan and execute remediation strategies, such as deciding whether to encrypt, archive or delete the data to prevent misuse or duplication of data elsewhere. Securing regulated data can help prevent data breaches. In addition, they can prove to auditors (and regulatory bodies if required) that controls exist for identifying and reporting on all PII collected. ​It also reduces the risk of data loss/breaches as the bank’s record retention policy is enforced on in-scope systems

Better data security: ​
Having a GDPR compliant framework in place will extend the bank’s cybersecurity practices for example:​
– Increased security and governance on external communications​
– Personal data specific Data Loss Prevention rules and Policy Tips for email to mitigate data leakage​
– Enhanced permissions, least privilege and security model for DSX​ (document management system)

Better alignment with evolving technology: ​
Migrating towards the latest technologies will allow effective management of growing demand for data​