Collibra & SecuPi – Protect and control access to identified sensitive or regulated data
Overview
COLLIBRA & SECUPI – PROTECT AND CONTROL ACCESS TO IDENTIFIED SENSITIVE OR REGULATED DATA
Data has become the single most valuable asset for many organizations to grow their business, but also
their single greatest liability if not protected and secured appropriately.
SecuPi has integrated with Collibra Catalog to provide automatic anonymization to all sensitive columns
with fine-grained access control across analytics environments and business applications.
SecuPi’s fine-grained access control, accountability, and tamper-proof audit trail enable Collibra Users
and Admins to not only see where the data is, but who is accessing it, when, from which application and
why.
SecuPi is recognized by Gartner and others as a leader with an innovative, game-changing approach to
data security, fine-grained Purpose Based Access Control (PBAC), accountability and privacy compliance.
COLLIBRA AND SECUPI JOIN FORCES
This partnership is perfectly aligned with SecuPi’s vision to Empower organizations to use data in a secure, compliant and responsible way, and Collibra’s mission to accelerate trusted business outcomes by connecting the right data for all Data Citizens.
Once sensitive columns are cataloged in Collibra, the challenging task of protecting those assets begins.
SecuPi pulls (periodically) all sensitive columns to apply required data protection, authorization and accountability while transparently controlling access to any sensitive data. Data protection includes Column level redaction, encryption, dynamic masking, row filtering and more. An Audit Trail for all access to data is fed back into Collibra providing Data Owners enhanced insight into how their data is being used, by whom, from where and why.
| Comparison | Data-Hub / Presto-based Solution | SecuPi | ||
| Overview | Adds a non-transparent cumbersome data orchestration layer (Presto). Requires client-side change of the native Snowflake drivers to Presto drivers and duplicated authorization. |
Transparent, no client changes, no duplicated authorization overhead. | ||
| Overlap with Collibra | Potential competitive solution to Collibra as it is packaged with discovery and data catalog capability posing direct risk to Collibra position | No Overlap – SecuPi is tightly integrated with Collibra without discovery or cataloging capacity | ||
| Performance overhead | High Performance Impact – adds a full-scale data orchestration layer (Presto) | Low – purpose-built transparent gateway or Databricks plugins | ||
| Support advanced analytics Database functions | No support (as native drivers are replaced with generic Presto drivers). Function must also be supported by specific Presto implementation. | Fully supported. Transparent access to all advanced data analytics functions. | ||
| Privileged Access Control | None – cannot control direct native access to cloud data platforms (e.g., Snowflake Web tools). | Fully supported including native access to cloud data platforms. | ||
| Installation & Maintenance costs | High maintenance cost with additional complex Presto orchestration layer to manage and upgrade. | Transparent, easy to install, low-cost implementations. | ||
| Broad Support Matrix | Limited – only common analytics environments supported. No support for native admin tools (e.g., Snowflake Web Tools, GCP Data Studio). | Fully supported – analytics environments and COTS or custom developed business applications. |
CONCLUSION:
SecuPi picks up where Collibra leaves off providing joint customers a very seamless integration of two very complementary products that together provide full initial data discovery, cataloging and classification of data, then visibility into the use, full accountability, fine-grained access controls and protection of sensitive or regulated data (PII, PHI, NPI, IP). The combined solution also provides centrally managed, data-centric policy-based, easily auditable compliance with applicable data privacy and data protection regulations. Full Data Mobility is also assured with rules that follow the data.
Carefully consider the sensitivity of the data involved, the privacy and regulatory compliance landscape, risk exposure and IT infrastructure complexity when deciding which approach to consider. The Collibra/SecuPi combined solution is the clear choice anytime complex overlapping hierarchies and complex, matrixed access control requirements must be enforced for sensitive or regulated data.
Contact Collibra or SecuPi to learn why so many global companies in banking, insurance, healthcare, retail, telecommunications, energy, manufacturing, and government are leveraging both Collibra and SecuPi to solve their most intractable data security, protection, and privacy compliance challenges.
