Data protection within an unsecured storage environment

A computer-implemented method of securing data within an unsecured environment, the computer-implemented method comprising:

• as implemented by a storage management system implemented in computer hardware and configured with specific computer-executable instructions,
• receiving data to be backed up from a primary storage environment, the data comprising a plurality of files, the primary storage environment comprising an at least partially unsecured storage environment, wherein at least some data stored in the at least partially unsecured storage environment is stored in an unencrypted form or in a storage location with shared access;
• performing a natural language processing process on the plurality of files to determine content of files within the plurality of files;
• accessing a security policy for the primary storage environment;
• tagging the files within the plurality of files based at least in part on the content of the files and the security policy;
• selecting a file from the plurality files based at least in part on the tags of the files;
• indexing a location of the file at the primary storage environment, thereby enabling a secured version of the file to replace the file at the location of the file at the primary storage environment;
• and
• securing the file at the primary storage environment by at least modifying a storage location or storage format of the file.