Avanpost Closes Unnecessary Doors to Corporate Data
Avanpost, one of Russia’s leading developers of identity and access management systems for enterprise data, has introduced DAG, a solution that controls access to unstructured data stored on file servers, in cloud environments, and in knowledge bases.
The solution identifies confidential files, shows actual and excessive access permissions, and helps remediate security violations.
Consider a familiar scenario: an employee changes roles but retains access to old folders, where personal data may sit alongside a document containing passwords. DAG identifies confidential information by analyzing file contents, shows users’ actual access permissions, and detects violations of security policies.
Its built-in business process engine routes requests to data owners, collects approvals, assigns tasks to IT teams, and tracks their completion. A follow-up scan verifies that access has been revoked. DAG monitors changes to permissions and data assets, sends information to SIEM and SOAR systems, and triggers response workflows. The solution can operate independently or alongside an identity management (IDM) system, taking employees’ roles and employment status into account and initiating access reviews when they change positions or leave the company. Versions are available for large enterprises and midsize businesses, along with a pilot deployment on the customer’s infrastructure.
