Spirion Results Remediation

Table of Contents

• Results Remediation
• How to Avoid Being Flagged for Sensitive Data Findings Each Month
• Additional Resources

Results Remediation

This applies only if results were returned after a scan with Spirion.

1. After a scan completes, you will be presented with a Search Summary. Click Save As to save a report of your results to review at your convenience. This report is encrypted with your Spirion Profile Password.

2. Name your results file, leaving "Use Spirion Profile Password" selected and click Save. Your results file is now available for future review. If you want to review results now, click Advanced.

3. Identify Location and Matches and decide what action to take on the file.

   1. Choose Shred if you have safely copied the file to an approved location and want to securely delete the file or if you no longer need the file. IMPORTANT: It is not possible to recover a shredded file.

   2. Choose Encrypt if you want to store the file on your workstation in a secure manner. You can encrypt the file with your Spirion Profile Password or with an alternate password. IMPORTANT: A file cannot be recovered if a password is lost or forgotten to decrypt the file.

   3. Choose Ignore if the file or match is not sensitive. Please report large instance of false positives to the Information Security Office.

   4. Redact is generally not recommended. It is preferred to ignore, shred, or encrypt the entire file.

   5. Quarantine is generally not recommended. It is preferred to manually move the entire file to a secure location, and then initiate a shred on the file.

How to Avoid Being Flagged for Sensitive Data Findings Each Month

If you continue to be flagged for sensitive data findings each month, you may want to consider alternate business practices. The Information Security Office offers consultations to help work through issues of handling and storing data securely. To book a consultation visit: https://www.ohio.edu/oit/training/consultations/security

Generally, if it is a personal file with sensitive data, we recommend storing in an alternate secure location such as an encrypted flash drive or personal cloud storage.

If it is sensitive Ohio University data, we recommend leveraging a secure Ohio University provisioned SharePoint site for data back-up. For more information on where to store data based on a specific data type, visit: https://www.ohio.edu/oit/security/storing-data-type

Get Help From OIT

• Visit the Information Security page to create a ticket

Additional Resources

• Schedule a consultation with the Information Security Office.

• Where to store data based on specific data types.