Identity Finder (Mac) - Taking Action on the Scan Results

This document discusses general considerations when evaluating the results of scans. More detailed information can be found in the Identity Finder Help documentation in the Protecting Personal Information Topic. All documentation was performed with the Mac client of Identity Finder version 7.0.0.9.

Note: All data shown is false.

Viewing Scan Results
When Identity Finder finishes a scan, the user is returned to the Main window.

Results.png

The main windows has two sections. The left section is the results pane and the right section is the preview pane.

The results pane shows found matches, their location, and other attributes where possible data matches (eg. SSN and CCN) were found.

If more than one match was found within a file, all matches can be displayed by clicking the Arrow.png icon next to the location name.

The preview pane highlights sensitive information within the context of the file. This allows you check the found match to ensure that it is sensitive information that must be secured or if it is a false positive eg. a 9-digit number in the same format as a SSN (which is not sensitive information).

Taking Action on Scan Results

Across the top of the Main Identity Finder Window are buttons that correspond to actions you can take on found matches highlighted in the results pane.

FileActions.png

An action can be taken on a single file or on a group of files. Multiple files can be selected by checking the box next to each file you wish to perform actions on.

Shred:
If a file has sensitive information on it and you wish to remove the file, you should use the Shred feature. Shred is useful when you no longer need any information on the file.

Secure:
When a location has sensitive information in it and you wish to securely keep the information and the file, use the Secure feature. Secure allows you to keep the file and the information. By default, we have disabled this feature of Identity Finder. You will need to supply a password to secure files. If this password is lost or forgotten, access to the data will also be lost. A method for password recovery should be implemented before using the Secure feature.

Quarantine:
When a file has sensitive information and you wish to move it to a secure location, you should use the Quarantine feature. Quarantine moves the file and shreds the original so that the data can not be accessed by someone who gains access to your computer. It is important for the quarantine location to be highly secure, such as an encrypted hard drive or location that unauthorized individuals do not have access to.

Ignore:
If the file does not contain sensitive information (a false positive) or it is sample data, you can choose to ignore the results. This will add the file to the Ignore List. The file will not be scanned in subsequent scans and it will not show up in the results list.



Keywords:idf pii identity finder data discovery mac macintosh scan   Doc ID:14443
Owner:Allen M.Group:Office of Campus Information Security
Created:2010-06-09 19:00 CDTUpdated:2014-11-18 12:48 CDT
Sites:College of Agricultural & Life Sciences, DoIT Help Desk, Office of Campus Information Security
Feedback:  1   0