System and method of assessing data protection status of data protection resources

A method of computerized managing a plurality of data protection (DP) resources, the method comprising:

• accommodating data related to at least part of the DP resources among said plurality of DP resources in a memory thus giving rise to accommodated data, wherein at least part of the accommodated data is obtained by automated collecting;
• processing, by a processor operatively coupled to the memory, the accommodated data, said processing resulting in identifying at least one data protection (DP) scheme characterized, at least, by a data protection technique implemented with regard to at least one DP resource related to said DP scheme;
• identifying, by the processor, one or more data protection (DP) gaps affected the at least one DP resource;
• and
• using the identified one or more DP gaps for assessing, by the processor, DP risk score to the at least one DP resource, wherein
• at least one DP gap is characterized by a gap profile and is identified by matching said gap profile to a respective DP scheme.

A system capable of computerized managing a plurality of data protection (DP) resources, the system comprising:

• a memory adapted to accommodate data related to at least part of the DP resources among said plurality of DP resources, wherein at least part of accommodated data is obtained by automated collecting and/or automated processing of the collected data, thus giving rise to accommodated data;
• and
• a processor operatively coupled to the memory and configured to process the accommodated data, said processing to be resulted in identifying at least one data protection (DP) scheme characterized, at least, by a data protection technique implemented with regard to at least one DP resource related to said DP scheme and in identifying one or more data protection (DP) gaps affected the at least one DP resource, the processor being further configured to use the identified one or more DP gaps for assessing DP risk score to the at least one DP resource, wherein
• identifying the one or more DP gaps comprises running at least one rule being characterized by a scope of the rule, an identification condition and an action to be drawn from the rule when the condition is satisfied, wherein the scope of the rule is characterized by said identified DP scheme.

A system capable of computerized managing a plurality of data protection (DP) resources, the system comprising:

• a memory adapted to accommodate data related to at least part of the DP resources among said plurality of DP resources, wherein at least part of accommodated data is obtained by automated collecting and/or automated processing of the collected data, thus giving rise to accommodated data;
• and
• a processor operatively coupled to the memory and configured to process the accommodated data, said processing to be resulted in identifying at least one data protection (DP) scheme characterized, at least, by a data protection technique implemented with regard to at least one DP resource related to said DP scheme and in identifying one or more data protection (DP) gaps affected the at least one DP resource, the processor being further configured to use the identified one or more DP gaps for assessing DP risk score to the at least one DP resource, wherein
• assessing DP risk score to the at least one DP resource comprises calculating the risk score as a function of, at least, the identified one or more DP gaps, respective DP gaps severities and a state of the at least one DP resource.

A system capable of computerized managing a plurality of data protection (DP) resources, the system comprising:

• a memory adapted to accommodate data related to at least part of the DP resources among said plurality of DP resources, wherein at least part of accommodated data is obtained by automated collecting and/or automated processing of the collected data, thus giving rise to accommodated data;
• and
• a processor operatively coupled to the memory and configured to process the accommodated data, said processing to be resulted in identifying at least one data protection (DP) scheme characterized, at least, by a data protection technique implemented with regard to at least one DP resource related to said DP scheme and in identifying one or more data protection (DP) gaps affected the at least one DP resource, the processor being further configured to use the identified one or more DP gaps for assessing DP risk score to the at least one DP resource, wherein
• the processor is further configured to associate each DP risk score assessed to the at least one DP resource with a time stamp indicative of point in time of assessing corresponding risk score, and
• the memory is further configured to accommodate the DP risk scores in conjunction with respectively associated time stamps.

A computerized method of providing a service related to identifying one or more data protection (DP) gaps related to one or more DP resources among a plurality of data protection (DP) resources, the service comprising:

• accommodating data related to at least part of the DP resources among said plurality of DP resources in a memory thus giving rise to accommodated data, wherein at least part of the accommodated data is obtained by automated collecting;
• processing, by a processor operatively coupled to the memory, the accommodated data, said processing resulting in identifying at least one data protection (DP) scheme characterized, at least, by a data protection technique implemented with regard to at least one DP resource related to said DP scheme;
• identifying, by the processor, one or more data protection (DP) gaps affected the at least one DP resource;
• and
• using the identified one or more DP gaps for assessing, by the processor, DP risk score to the at least one DP resource, wherein
• identifying the one or more DP gaps comprises running at least one rule being characterized by a scope of the rule, an identification condition and an action to be drawn from the rule when the condition is satisfied, wherein the scope of the rule is characterized by said identified DP scheme.

A computerized method of providing a service related to identifying one or more data protection (DP) gaps related to one or more DP resources among a plurality of data protection (DP) resources, the service comprising:

• accommodating data related to at least part of the DP resources among said plurality of DP resources in a memory thus giving rise to accommodated data, wherein at least part of the accommodated data is obtained by automated collecting;
• processing, by a processor operatively coupled to the memory, the accommodated data, said processing resulting in identifying at least one data protection (DP) scheme characterized, at least, by a data protection technique implemented with regard to at least one DP resource related to said DP scheme;
• identifying, by the processor, one or more data protection (DP) gaps affected the at least one DP resource;
• using the identified one or more DPI gaps for assessing, by the processor, DPI risk score to the at least one DP resource;
• accommodating in the memory one or more DP risk scores assessed to the at least one DP resource, each DP risk score associated with a time stamp indicative of point in time of assessing the respective DP risk score;
• and
• generating one or more reports rendering, at least, data indicative of differences between DP risk scores assessed to the at least one DP resource and having different time stamps.