Hey, guys!
I've got a customer asking for a tool to sniff their shares and mailboxes for sensitive data (by their own definitions), to prevent having sensitive information available where it shouldn't be. From what I can tell by a few google searches, there are a lot of tools for this.
However!
Scanning for sensitive data could be a bit of a nightmare, both security and HR wise. Not really sure what angle to attack it from.
Of course, internal training is a must, to try to ensure the data being saved in the correct places etc. But the need to have a mechanism in place to detect if something isn't supposed to be there, is definitely present.
Any input on this is highly appreciated!
