Security&Governance
This document discusses security and governance considerations for big data. It notes that while many businesses use big data, they may not have sufficient access controls or security practices in place. Big data breaches can be large, making security critical. It then outlines some risks like insufficiently hardened systems, uncontrolled access, and unfulfilled regulatory requirements. The document introduces GOSEC as a centralized security component that manages access control across big data services like HDFS and applications. GOSEC allows setting access policies for users and groups for resources like files and topics. It covers authentication, authorization, and auditing. The document stresses the need to integrate GOSEC with the organization's identity provider and security strategies to prevent leakage of internal and external data. It
Security&Governance
- 1. Security & Governance in Big Data
- 2. Security
- 3. BIG DATA IS STILL A NEW TECHNOLOGY FOR MOST ORGANISATIONS, AND ANY TECHNOLOGY THAT IS NOT WELL UNDERSTOOD WILL INTRODUCE NEW VULNERABILITIES
- 4. Many businesses already use Big Data to store data. However they may not have the access rights control required from a security perspective. Big Data breaches can be big, so data security becomes even more critical
- 5. CRITICAL RISKS IN BIG DATA PLATFORMS ∎ BIG data, BIGGER security leaks ∎ The attack surface of the nodes in a cluster may not be adequately hardened ∎ Access to data from multiple locations may not be sufficiently controlled ∎ Regulatory requirements with logs and audit trails may not be fulfilled,
- 6. BIGCHALLENGE∎Platform must have a comprehensive security solution ∎A secure integration into BBVA security is a need
- 7. GOSEC is a centralized security component managing fine-grained access control across Big Data services: HDFS, Cassandra, Kafka and Big Data web applications such as Viewer. WHAT IS IT? GOSEC allows management policies controlling access to files, topics, tables, databases… These policies can be set for individual users or groups
- 10. USERS & GROUPS MANAGEMENT Users & groups are not directly managed in GOSEC. They are always recovered from organization Identity Provider (LDAP).
- 11. USERS & GROUPS MANAGEMENT Roles & profiles are an easy way to set up security policies for dynamic group memberships or user tasks.
- 12. USERS & GROUPS MANAGEMENT ACLs can be created to grant or revoke access to different resources.
- 13. USERS & GROUPS MANAGEMENT Every operation is audited by GOSEC. Only security admins have access to the audit log.
- 14. SO, WHAT MUST WE DO NOW ?
- 15. BBVA INTEGRATION Synchronized IDP Armadillo and Global Directory Data Encoding for Security Strategy to prevent internal and external data leakage
- 16. Governance
- 17. “DATA IS GOING TO DEFINE THE COMPETITIVE ADVANTAGE IN THE GLOBAL FINANCIAL ECOSYSTEM OF THE FUTURE” “WE ARE BEGINNING TO BUILD DATA-DRIVEN BANK” Francisco González, November 2015
- 18. WHY IS DATA GOVERNANCE NECESSARY? Large data volumes and various data types Democratize the use of the data with new flexible and agile exploitation Data management policies that ensure quality & traceability Data Centric
- 19. GOVERNANCE MODEL TRANSVERSAL AND CONVERGENT ACROSS ALL GEOGRAPHIES OF GROUP GLOBAL
- 20. WHAT WE EXPECT OF DATA GOVERNANCE? Data Dictionary Functional and Technical Level Lineage Traceability of data throughout its life cycle Quality Data Quality and Process Quality Standards and Best Practices Standards for each platform technology Visualization and Exploration Graphical solution for governance data