Thales Data Security Fabric (DSF)

Thales Data Security Fabric (DSF) is a data-centric security platform developed by Thales. It aims to standardize data security controls across large and complex data environments, provide centralized visibility, and deliver proactive protection. DSF makes capabilities such as data discovery, classification, activity monitoring, risk analytics, and threat detection manageable from a single dashboard. It covers all data types, including structured, semi-structured, and unstructured data.

Core Components of DSF

• Data Discovery & Classification: Automatic discovery and classification of sensitive data
• Database Activity Monitoring (DAM): Continuous monitoring and auditing of database activities
• Data Risk Analytics (DRA): Scoring and prioritization of data risks
• Database Risk Intelligence (DRI): Proactive risk management
• File Activity Monitoring (FAM): Monitoring and auditing of unstructured data
• Data Access Control & Masking: Access control and data masking
• Centralized Dashboard and Reporting: Single-point management of all data security activities

Data Risk Intelligence (DRI)

Data Risk Intelligence (DRI) combines Data Security Fabric's risk and threat detection capabilities with the data protection capabilities of the CipherTrust Data Security Platform. It enables organizations to proactively see which of their data is at risk, perform risk scoring, and determine which data should be protected as a priority. DRI supports the shift from a reactive approach to proactive data risk management.

Database Activity Monitoring (DAM)

Database Activity Monitoring (DAM) continuously monitors and logs all access to databases (who, when, which data, which operation). It detects and protects against privileged user activities, anomalous queries, and potential data leaks. It is a critical capability for compliance (KVKK, GDPR, PCI-DSS, etc.) and insider threat detection.

File Activity Monitoring (FAM)

Thales File Activity Monitoring (FAM) monitors the activities of unstructured data (files, emails, logs, media files) in real time. It detects activities such as copying, downloading, deleting, or sharing files. It is designed specifically for monitoring sensitive data on file servers, cloud storage, and file shares.