How To Remediate Your Department's Spirion Results on the Fileserver

Due to the risk of data loss/theft, and the costs associated with a computer security incident, SC Johnson College of Business has established a goal to completely eliminate the storage of confidential data from its computing environment. Confidential data includes: social security, credit card, driver’s license, and bank account numbers of our students, alumni, faculty, staff, customers, and affiliates.

Department's are only required to Shred or Redact files.  Ignoring false positives will be handled by JCB IT Operations so they will be ignored in future scans.
 

How To Open Your Results File

NOTE: If you are working off campus or outside the College of Business network, you must first connect to the JCB-VPN before accessing the JCB Fileserver.  Instructions for connecting to the JCB-VPN can be found here.

1. Open your department's folder that JCB IT Operations informed you as containing the Spirion results
2. Double-click the Spirion results file named “z_Confidential Data Scan Results for YOUR DEPARTMENT"
3. Click Cancel when asked for your Spirion Profile Password

4. Enter the password provided by JCB IT Operations

5. Spirion will open the results

How To Remediate Results

6. For each file, review the “match” found in the MATCH column
7. Use the below questions to determine the best remediation action:
   • If the match is confidential data and there is no business reason to keep the file
     • Click Shred – this will securely delete the file
   • If the match is confidential data and you need to keep the contents of the file but not the confidential data
     • Click Redact – this will replace the confidential data with X’s leaving the contents of the file intact
       • This is only available for MS Office documents and Text files.
       • PDF files can be redacted by using the guide link https://tdx.cornell.edu/TDClient/48/Portal/KB/ArticleDet?ID=1638
   • If the match is confidential data and you need to keep this data for business purposes
     • Take No Action For That File ONLY
       1. Don’t click any action buttons
       2. Move on to the next file to be remediated
       3. Contact JCB IT Operations to discuss moving the files containing confidential data
   • If the match is not confidential data and you need to keep this file
     • Take No Action - don’t click any action buttons, just move on to the next file in the list
     • JCB IT Operations will ignore these files from future scans
8. Continue taking action on each file until you’ve remediated all files

How To Save Remaining Results

IMPORTANT - If you fail to save the results of remaining false positives, they won’t be ignored from future scans.

9. Click File > Save As
10. Use the same filename as the file you opened and append “ – Remediated” to the end of the filename and Click Save
    (ex “z_Confidential Data Scan Results for Information Technology - Remediated”)

11. Enter the same password you used to open the results file and Click Ok

12. Click Yes to the Apply Ignore List dialog box

13. Close Spirion
14. Contact JCB IT Operations letting them know you have finished remediating your department’s results and to ignore the false positives from future scans.

How To Save Results To Continue Remediating Later

If you are unable to finish remediating all of the items and would like to save your progress, you can save the results file and open it at a later time

1. Click File > Save
2. Click Yes

3. Enter the same password you used to open the original results file

4. Click Yes to the Apply Ignore List dialog box

5. Close Spirion