A Fortify 24x7 brand. Gauges, hourly readings and a watch desk kept for smaller firms.Client sign inReach the desk
CyberThreat Management
Front 05 / Data exposure

Survey the ground before you forecast anything on it.

A weather office knows where its stations are and what stands around them. Where sensitive material actually sits is unknown at most firms, which turns every judgement about risk into guesswork. This front locates the material first, scores what each machine carries, and only then acts.

ActifileSurvey, then actScored per device
Two lines. Locate what sits there, then settle where it may travel.
Lines posted2
Read byActifile
UnitDevice
OrderSurvey first, control second

The first survey is meant to be uncomfortable

Almost every survey finds card numbers inside a spreadsheet made in 2019, identity documents parked in a downloads folder, and the customer list copied onto a laptop last used by somebody who left a year ago. Normal, every bit of it. Hence the discovery line coming first, at a price of its own.

Turning that pile into a plan is what scoring does. Exposure comes out per device, so clean up gets an order that can be defended, rather than a list of everything sorted alphabetically that nobody will ever finish.

Almost every survey finds card numbers inside a spreadsheet made in 2019.

Acting on it without stopping the work

Encryption is applied to files where they already sit, and the exits data leaves by get governed, removable drives and uploads among them. Approved staff carry on as before, because the encryption is transparent to them and no new habit needs learning.

Encrypting at the file matters because a copy stays encrypted after it leaves. Controls that only work while material sits inside the building are controls for a world without laptops.

Lines on this front

Line records and rates

Every rate here is drawn from billing as the page renders. Anything you log stays in the observation log while reading continues.

Fortify-DLP-ClassifyLine record

Sensitive Data Discovery

Actifile locating and scoring whatever already sits on the machines

A survey ahead of any forecast. Nobody governs an unlocated folder, so this line locates regulated and valuable material first, then attaches a figure.

  • It sweeps every machine, and the shares each one reaches, for card data, identity documents, health records and contracts.
  • Exposure gets a score against each device, and that score is what gives clean up an order instead of a wish list.
  • The opening survey usually makes uncomfortable reading. Taking it is the point.
Observed atFiles at rest on each enrolled machine, plus the shares reachable from it
ForecastsWhere a loss would hurt most, ranked by what each device carries
ArchivedSurvey results and exposure scores, refreshed as the estate shifts
Issued byActifile
Confirmed atA review alongside the Fortify 24x7 desk, so the ranking matches your reality
Readingper device
charged up front, each monthQTY
Fortify-DLP-EnforceLine record

Encryption and Channel Control

Actifile encrypting files and governing the exits

Having located the material, this line acts on it. Encryption is applied where files already sit, and the exits data leaves by get governed rather than merely counted.

  • Transparent encryption, so approved staff carry on working with no new habit to learn.
  • Control over removable drives, over uploads, and over whichever other exits data genuinely uses.
  • Copied material stays encrypted once it leaves the machine, which is the reason for doing it there.
Observed atFiles on the device, and the channels carrying them off it
ForecastsMovements of sensitive material that would matter had they not been intended
ArchivedA record of governed movements, held for review and for auditors
Issued byActifile
Confirmed atThe Fortify 24x7 desk, which tunes the policy with you before it bites
Readingper device
charged up front, each monthQTY
Honest scope

Where this front stops

Data work touches legal obligation, so being especially clear about what these two lines are not is worth doing.

  • This is not compliance certification. Survey and controls support a compliance programme. Auditing you, certifying you, or taking responsibility for a regulator's view of your position are none of them included.
  • An authorised person may still walk out holding a file. An employee entitled to read a document may still decide to keep hold of it. The controls are leaver procedure, a review of access, and whatever your own employment agreements state. Those belong to you.
  • Discovery reaches only what it can see. Files on an unenrolled machine, or on a share the agent cannot see, are absent from the survey. Absence there is not evidence of safety.
  • Classification is not perfect. Automatic identification of sensitive material is good, and it is not infallible. Treat the survey as the opening of a human review, which we will run with you.
  • We do not decide your retention. How long you keep customer records, and under which obligation, belongs with you and your advisers. Whatever you settle on, we implement.
NOTICE 01

Heads up: card statements show FORTIFY 24X7 - CyberThreat Management is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.

Front 01Detection watchFront 02Execution controlFront 03Mailbox watchFront 04Device fleetFront 05Data exposureFront 06Backup and continuity
Every published lineSix instrumentsClient portalOpen the rate card