Major New Features

Support for Unstructured Data Classification for S3

Netskope One DSPM now supports the classification of unstructured data for text-based files within S3 data stores, providing visibility into sensitive data in your environment. Enabling classification will now scan the S3 bucket (at the selected sample rate %) to detect sensitive data. The Data Store Inventory page now shows you the number of sensitive data types, and you can drill down to see details of sensitive data types, including occurrences per sampled files. Current existing S3 data store connections are updated to match this new connection UI. Configured Glue Crawlers, Roles, and Workgroups may need to be sunset; ask your account rep for more information.

Azure Organization-based Infrastructure Onboarding

You can now onboard all Microsoft Azure accounts at scale using our Tenants (aka Organizations)-based infrastructure onboarding. This enables you to quickly discover data stores and facilitate scanning and classification of all sensitive data within your Azure environment.

Report Scheduling

From the Reports page, you can schedule your Netskope One DSPM Risk Summary or Executive Detail Report to be emailed on your preferred cadence to recipients of your choice, enabling security and governance stakeholders to review their data security risks. 

Service Account Risk and Workflow Enhancements 

An enhanced experience linking usernames as Service Accounts now makes the Employee Management page the single source for managing the identities of employees, service accounts, and unlinked (ghost) users. Additionally, the User Assessment Overview page provides comprehensive user risk profiling, including the ability to detect data usage directly via username or indirectly via 3rd party application. Netskope One DSPM maps individual queries made by usernames as service accounts to corresponding employees. 

Improvements and Updates

Streamlining Infrastructure Onboarding

Onboard your data stores in less than 10 minutes! The workflow for onboarding infrastructure connections for AWS, GCP, and Azure is now extremely simplified. You can launch CloudFormation directly or download the pre-filled Terraform scripts to set up credentials and onboard your cloud infrastructure into Netskope One DSPM. This enables fast and easy onboarding, so you can start scanning data stores and assessing risk analyses across all environments.

Contained Data Tags

From the Data Store Inventory page, you can now see within each data store where databases, schemas, tables, and fields are tagged. You have full visibility into which data stores host your sensitive data such as PII, credit card information, HIPAA-PI, and more centralized on the Data Store Inventory page. Contained data tags provide visibility into where sensitive data is tagged at all levels of your data hierarchy.

Support for Multiple Expected Usernames

Netskope One DSPM’s User Assessment page provides comprehensive user risk profiling, including the ability to detect data usage directly via username or indirectly via a 3rd party application. Netskope One DSPM maps individual queries made my usernames as Service accounts to corresponding Employees. An enhanced intuitive experience linking usernames as Service Accounts makes the Employee Management page the central source for managing identities of employees, service accounts, and unlinked (ghost) users.