Concentric AI Included in Gartner’s 2023 Innovation Insight Report for Data Security Posture Management (DSPM)

The 2023 Gartner report, Innovation Insight: Data Security Posture Management, discusses the role of Data Security Posture Management (DSPM) technologies in discovering unknown data and categorizing structured and unstructured data across cloud service platforms. With massive cloud migration and more data to manage than ever before, DSPM technologies can help identify security and privacy risks as data spreads through pipelines and across geographic boundaries.

Key findings of the report include:

• The increasing spread of data across cloud service platforms (CSPs) and geographic boundaries necessitates technologies to discover and locate unknown or unused data repositories.
• DSPM solutions are evolving to discover unknown data repositories and identify whether the data they contain is exposed to data residency, privacy, or data security risks.
• DSPM solutions can use data lineage to discover, identify, and map data across structured and unstructured data repositories.
• DSPM technologies use custom integrations with identity and access management (IAM) products. They can create data security alerts but typically do not integrate with third-party data security products, leading to a variety of security approaches.

Key recommendations of the report

The report provides recommendations for security and risk management leaders responsible for the security of applications and data.

First, organizations should begin their data security posture management (DSPM) journey by identifying which datasets require specific data security governance (DSG) policies. Once these datasets are identified, organizations should compare various DSPM products to determine their ability to map these datasets across their architecture. It’s also crucial to assess the ability of DSPM products to create and manage metadata — necessary for categorizing data within a data catalog. This categorization supports various functions such as search, access enforcement, legal holds, remediation, and privacy requirements like data subject access requests and deletions.

Next, organizations should evaluate and compare the response options of different DSPM tools when faced with undue exposures, security risks, or compliance risks. During this process, organizations must assess whether each DSPM product under consideration already has integrations with data security controls, how associated metadata can be used by third-party products, or if the vendor has a roadmap to achieve these goals.

Organizations should also determine how quickly a DSPM product can be implemented to establish an assessment and the frequency required to update that assessment, considering the evolution of their data portfolio. If opting for a point DSPM solution, it’s advised to invest tactically, limiting contracts to one or two years, and negotiating easier access to product upgrades as the market matures and evolves.

Gartner predicts that by 2026, more than 20% of organizations will deploy DSPM technology due to the urgent requirements of identifying and locating previously unknown data repositories and to mitigate associated security and privacy risks.

Why Concentric AI is the right choice for Data Security Posture Management

Let’s face it: today’s modern enterprise is struggling with data security. Protecting intellectual property, financial, business confidential, and regulated PII/PCI/PHI) data in increasingly complex environments can be a monumental challenge.

But with Concentric AI’s comprehensive DSPM capabilities, your organization can:

• Discover, monitor and protect all data types, including Cloud, on-premises, structured, unstructured, and shared via messaging services
• Gain a risk-based view of data and users
• Leverage automated remediation to instantly fix access and activity violations
• Find risk without rules, formal policies, regex, or end-user involvement
• Secure API-based SaaS solution with no agents required

Our solution provides agentless integration with numerous cloud products and services.

It’s also so easy to deploy — sign up in 10 minutes and see value in days.