Redgate logo for print use

End-to-end Database DevOps

Case study

Driving organizational change and reducing risk through data classification

Customer

A healthcare sharing organization that assists with medical needs through an innovative, effective approach which doesn’t involve health insurance.

Challenge

To comply with GDPR and state legislation such as CCPA in the US to enable future compliance.

Solution

A single tool that enabled one estate view and that scales for future growth.

Results

Classified their entire estate and implemented a process to classify on the go.

The Customer

Samaritan Ministries International was founded in 1994 and is a member-led healthcare sharing organization that assists with medical needs through an innovative, effective approach which doesn’t involve health insurance.

When members have a medical need, they receive support from other members and pay their healthcare providers directly. It has a growing database estate that comprises 25 servers and 75 production databases.

26years of sharing25servers75production databases

The Challenge

The organization wanted to protect their data to comply with GDPR and state legislation such as CCPA in the US, to enable future compliance.

They wanted to be able to take the data they had collected, understand its sensitivity, and document this to inform the organization about how data is shared. They needed to understand who has access to sensitive data within the organization and when to provide extra security, particularly around PII and PCI data.

Therefore they needed a tool that would support them in their compliance needs at present and in the future, and that would enable them to develop an automated process going forwards to support their data protection needs.

The categorization of data classification has helped tremendously within the business, most notably with our compliance and security teams.

Aaron Urfer, DBA, Samaritan Ministries

The Solution

The solution needed to fit these requirements to enable success for the customer:

  • Scalable for future growth
  • Provide a ‘flightboard’ view for the C-suite and executives, to enable toplevel insight into sensitive data within the organization
  • Understand where the data sits within the estate and how it is classified, to
    enable the appropriate data protection measures to be implemented
  • One estate view
  • Flexibility to manage new regulations impacting already classified data
  • Ability to bulk classify data

The organization chose Redgate’s SQL Data Catalog as it met all their requirements and enabled them to classify their data from the day of purchase. It was also key that follow-on remediation activities were also supported by other Redgate tools, further enabling Samaritan Ministries’ data protection approach.

The implementation of SQL Data Catalog has driven a change in company culture, particularly around our developer teams and the risks of working in production environments

Aaron Urfer, DBA, Samaritan Ministries

The Results

Redgate’s SQL Data Catalog helped Samaritan Ministries in these ways:

 

  • Enabled them to understand the sensitive and at-risk data in the business
    and to inform policies for future data protection
  • Supported implementation of encryption across key databases based on
    key data classifications
  • Classified their entire estate and implemented the process to classify on
    the go
  • Allowed them to act on the outcomes of the data classification to carry out
    data masking using Redgate’s Data Masker
  • With the classified data, Samaritan Ministries have now implemented
    Redgate’s SQL Clone to enable developers and QA teams to work outside
    of the production environment and limit risk to sensitive data
Case study

Driving organizational change and reducing risk through data classification

Samaritan Ministries wanted to protect their data to comply with privacy legislation, and needed a tool that would support them in their compliance needs at present and in the future, and that would enable them to develop an automated process going forwards to support their data protection needs.

Contents

The Customer

A healthcare sharing organization that assists with medical needs through an innovative, effective approach which doesn’t involve health insurance.

The Challenge

To comply with GDPR and state legislation such as CCPA in the US to enable future compliance.

The Solution

A single tool that enabled one estate view and that scales for future growth.

The Results

Classified their entire estate and implemented a process to classify on the go.

The Customer

Samaritan Ministries International was founded in 1994 and is a member-led healthcare sharing organization that assists with medical needs through an innovative, effective approach which doesn’t involve health insurance.

When members have a medical need, they receive support from other members and pay their healthcare providers directly. It has a growing database estate that comprises 25 servers and 75 production databases.

26years of sharing25servers75production databases

The categorization of data classification has helped tremendously within the business, most notably with our compliance and security teams.

Aaron Urfer, DBA, Samaritan Ministries

The Challenge

The organization wanted to protect their data to comply with GDPR and state legislation such as CCPA in the US, to enable future compliance.

They wanted to be able to take the data they had collected, understand its sensitivity, and document this to inform the organization about how data is shared. They needed to understand who has access to sensitive data within the organization and when to provide extra security, particularly around PII and PCI data.

Therefore they needed a tool that would support them in their compliance needs at present and in the future, and that would enable them to develop an automated process going forwards to support their data protection needs.

The implementation of SQL Data Catalog has driven a change in company culture, particularly around our developer teams and the risks of working in production environments

Aaron Urfer, DBA, Samaritan Ministries

The Solution

The solution needed to fit these requirements to enable success for the customer:

  • Scalable for future growth
  • Provide a ‘flightboard’ view for the C-suite and executives, to enable toplevel insight into sensitive data within the organization
  • Understand where the data sits within the estate and how it is classified, to
    enable the appropriate data protection measures to be implemented
  • One estate view
  • Flexibility to manage new regulations impacting already classified data
  • Ability to bulk classify data

The organization chose Redgate’s SQL Data Catalog as it met all their requirements and enabled them to classify their data from the day of purchase. It was also key that follow-on remediation activities were also supported by other Redgate tools, further enabling Samaritan Ministries’ data protection approach.

The Results

Redgate’s SQL Data Catalog helped Samaritan Ministries in these ways:

 

  • Enabled them to understand the sensitive and at-risk data in the business
    and to inform policies for future data protection
  • Supported implementation of encryption across key databases based on
    key data classifications
  • Classified their entire estate and implemented the process to classify on
    the go
  • Allowed them to act on the outcomes of the data classification to carry out
    data masking using Redgate’s Data Masker
  • With the classified data, Samaritan Ministries have now implemented
    Redgate’s SQL Clone to enable developers and QA teams to work outside
    of the production environment and limit risk to sensitive data