Re: Cloudlock for DLP

[Gael Frouin <gfrouin () BERKLEE EDU>]

Hello,

We use CloudLock with Google Drive and OneLogin for various purposes:

   - Suspicious logins
   - Broad sharing of sensitive information (contact or address details,
   SSN, credit card numbers, etc.) on Google drive with automated responses
   and notifications to the users.
   - App "filtering" (which is basically removing Oauth authorization
   tokens after the fact on users' accounts for non-authorized services).

Most rules defined are custom at the moment even though I used to use some
of their default ruleset.
Just PM me if you want more details, I'm happy to discuss.
Gaël

On Wed, Jun 27, 2018 at 4:03 PM, WALTER KERNER <walter_kerner () fitnyc edu>
wrote:

> Hi Ernest.  We use CloudLock and are happy with it.  We use it to look for
> FERPA-related data that is shared broadly as opposed to shared only with
> individuals.  CloudLock did a great job tightening the FERPA-data alert to
> minimize false positives.
>
>
>
> When CloudLock discovers potential FERPA data that is broadly shared it
> notifies me and the user and asks them to fix their permissions.
>
>
>
>
>
>
>
> Walter Kerner
>
> AVP and CISO
>
> [image: blue]
>
> 333 7th Avenue, 13th Floor
> <https://maps.google.com/?q=333+7th+Avenue,+13th+Floor+New+York,+NY+10001&entry=gmail&source=g>
>
> New York, NY 10001
> <https://maps.google.com/?q=333+7th+Avenue,+13th+Floor+New+York,+NY+10001&entry=gmail&source=g>
>
> Voice: 212-217-3415
>
>
>
> *From:* The EDUCAUSE Security Constituent Group Listserv [mailto:
> SECURITY () LISTSERV EDUCAUSE EDU] *On Behalf Of *Ernest Richards
> *Sent:* Wednesday, June 27, 2018 3:36 PM
> *To:* SECURITY () LISTSERV EDUCAUSE EDU
> *Subject:* [SECURITY] Cloudlock for DLP
>
>
>
> Security listserv members,
>
>
>
> We are looking to implement Cloudlock for DLP in our university,
> specifically with Box, and I have a few questions:
>
>    - Has anyone been successful using Cloudlock with Box?
>    - Does anyone currently use Cloudlock’s automated responses for any
>    platform?
>    - Do you have any other experiences with Cloudlock that you’d be
>    willing to share?
>
>
>
> Please feel free to send me a message personally with any information you
> can provide. I sincerely appreciate any advice or insight you can provide.
>
>
>
>
>
> Thank you,
>
>
>
>
>
> Ernest Richards
>
> Network Security Analyst
>
> ITS – Infrastructure Services
>
> California State University, Bakersfield
>
> https://www.csub.edu/its
> <https://urldefense.proofpoint.com/v2/url?u=https-3A__na01.safelinks.protection.outlook.com_-3Furl-3Dhttps-253A-252F-252Fwww.csub.edu-252Fits-26data-3D02-257C01-257Ccdan-2540microsoft.com-257Cf2cd2f1018e140bcf33108d4ea727e4c-257C72f988bf86f141af91ab2d7cd011db47-257C1-257C0-257C636391224895209304-26sdata-3D-252FPCTO4xjXHRwKJhJSea6amGEanVkPh6-252FXJsnIc6uICk-253D-26reserved-3D0&d=DwMFAg&c=8Ipd-S27WuaKn7LZs55QTnbDbMQSs_VN5Yh9G3ue5PM&r=keBDy0Wzm68-xt93anNQd2hXOXqSx4B55-yGpNE9AeE&m=lH8TXNFJnrR6GzosyMpopR5ePXyVUoLFnFa_BRicWbk&s=Ah5e7mH0RpHk7buDpMVT9NhdWQtrSPnpg1RC-3Jafqc&e=>
>
> https://twitter.com/itscsub
> <https://urldefense.proofpoint.com/v2/url?u=https-3A__na01.safelinks.protection.outlook.com_-3Furl-3Dhttps-253A-252F-252Ftwitter.com-252Fitscsub-26data-3D02-257C01-257Ccdan-2540microsoft.com-257Cf2cd2f1018e140bcf33108d4ea727e4c-257C72f988bf86f141af91ab2d7cd011db47-257C1-257C0-257C636391224895209304-26sdata-3DW8H2XI759mA7wN4OhLF7yaPJ4-252F9j8tLsBJbrZZh3qiI-253D-26reserved-3D0&d=DwMFAg&c=8Ipd-S27WuaKn7LZs55QTnbDbMQSs_VN5Yh9G3ue5PM&r=keBDy0Wzm68-xt93anNQd2hXOXqSx4B55-yGpNE9AeE&m=lH8TXNFJnrR6GzosyMpopR5ePXyVUoLFnFa_BRicWbk&s=Nmbj9PlQtc9gLtepxeAWmr6VXA0g35_oPytprQ6hMZY&e=>
>
>
> 661-654-3432
>
> erichards1 () csub edu