Network Security Forensics for GDPR Compliance

An effective network security forensics strategy can assist an organization in providing key compliance-related details as part of any post-incident GDPR investigation.

image

The European Union’s General Data Protection Regulation (GDPR) will come into effect on May 25, 2018 and will apply to all organizations that provide services to residents of the European Union (EU), regardless of whether they are based in, or operating out of, EU territory. These regulations apply to the collection, handling, and storage of personal data from EU citizens.
In the event of a data breach, organizations risk severe penalties for noncompliance with the regulation.
Businesses should have processes and systems in place to not only prevent and detect data breaches but also to identify what data has been compromised, when the data breach occurred, how it happened, and why it happened.

When a breach occurs, an IT organization must quickly (within 72 hours) determine:

  • Where the attack came from
  • Which users (if any) were involved
  • Which internal assets communicated with the malicious activity
  • What data was accessed in the attack
  • Whether (and how) the attack spread laterally through the network

Download the White Papers “Packet-Based Security Forensics: A Next-Generation Approach to Attack Remediation” and “Network Security Forensics for GDPR Compliance” to better understand the value of packet-based security forensics that can be used by network teams to identify traffic related to a breach and identify the practical strategies for attack remediation.

Start protecting your monitoring data with three strategies that pinpoint areas of concern, and show you what to look for in a solution, while providing a checklist of possible security holes that you can begin addressing today, downloading the whitepaper “3 Data Security Safeguards for Performance Monitoring Tools”.

VIAVI Solutions offers an integrated packet capture and analysis platform with its Observer GigaStor and Analyzer solutions.
Gigastor is a high-fidelity network recorder that can capture, write to disk, and analyze traffic without packet loss. This packet capture fidelity is critical to forensics security analysis, where dropped packets can cause gaps in visibility that will undermine a security investigation.