A system for managing data in a Distributed Data Store (DDS), said system including:
- a Distributed Data Store (DDS), wherein said DDS includes a first domain, wherein said first domain comprises a first set of a plurality of data entities, wherein said first set of a plurality of data entities includes one or more directories, files, collections, documents, or other logical units of data,
- wherein said plurality of data entities of said first set are marked as being part of said first domain;
- and
- wherein said DDS includes a second domain, wherein said second domain comprises a second set of a plurality of data entities, wherein said second set of a plurality of data entities includes one or more directories, files, collections, documents, or other logical units of data,
- wherein said plurality of data entities of said second set are marked as being part of said second domain;
- and
- a repository storing first metadata relating to said first domain, wherein said first metadata identifies said first domain and identifies a set of first properties of said first domain,
- wherein said set of first properties includes an identification of at least one first sensitive data type,
- wherein said repository includes at least one first policy assigned to said at least one first sensitive data type,
- said repository also storing second metadata relating to said second domain, wherein said second metadata identifies said second domain and identifies a set of second properties of said second domain, wherein said set of second properties is different from said set of first properties,
- wherein said set of second properties includes an identification of at least one second sensitive data type,
- wherein said repository includes at least one second policy assigned to said at least one second sensitive data type,
- wherein data is managed in said DDS by scanning said first domain by applying said identification of said at least one first sensitive data type to said first set of a plurality of data entities to identify at least one data entity of said first set of a plurality of data entities as belonging to said at least one first sensitive data type,
- retrieving said at least one first policy assigned to said at least one first sensitive type, and
- applying said at least one first policy to said at least one data entity of said first set of a plurality of data entities belonging to said at least one first sensitive data type, and
- scanning said second domain by applying said identification of said at least one second sensitive data type to said second set of a plurality of data entities to identify at least one data entity of said second set of a plurality of data entities as belonging to said at least one second sensitive data type,
- retrieving said at least one second policy assigned to said at least one second sensitive type, and
- applying said at least one second policy to said at least one data entity of said second set of a plurality of data entities belonging to said at least one second sensitive data type,
- wherein said at least one first policy includes encrypting said at least one data entity of said first set.