File access auditing meets Spain's ENS compliance requirements
- Ayuntamiento Villanueva de la Cañada
- Administration
- Spain
)
)
)
)
Villanueva de la Cañada is a municipality in the Community of Madrid, Spain. Like any local government, its files hold a wealth of information about citizens and their activity. They are required to comply with Spain's Esquema Nacional de Seguridad (ENS).
ENS was established as part of Royal Decree 3/2010 and serves to establish principles and requirements for the adequate protection of information for Spanish public sector entities.
"FileAudit is compatible with everything we already have. We do not need to change backup systems or directory systems, nor do we need a dedicated server, or anything like that. It has been easy to use and its implementation has been fast. What's more, the software is reasonably priced."
Juan Labrador Egea - IT Manager
At the core of ENS compliance standards is the desire to protect information. To comply with requirements, the Ayuntamiento Villanueva de la Cañada needs visibility into who has access, who is using access, and what users are doing with protected data.
Juan and his team needed a way to establish a granular and detailed audit trail that they could show to any auditors to demonstrate that they'd put proper access controls in place to protect sensitive information against unwanted access.
Juan started looking for a solution that could monitor and record all file access and alert him of any suspicious behavior.
Juan was looking for an intuitive third-party solution to provide real-time data and meet the ENS requirements. Danysoft, software distributor and one of IS Decisions’ partners, recommended FileAudit as they knew it would do exactly what they needed.
The visibility, automatic alerts and scheduled reports were everything Juan was looking for.
A standout feature to Juan was FileAudit’s mass access alerts. They allow IT to get alerts on the most common potential red flags, such as the presence of mass copying, bulk deletion, or movement of data.
After testing FileAudit, Juan found the installation and configuration of the software was fast.
"FileAudit is compatible with everything we already have. We do not need to change backup systems or directory systems, nor do we need a dedicated server, or anything like that. It has been easy to use and its implementation has been fast. What’s more, the software is reasonably priced."
Juan Labrador Egea - IT Manager
Juan saw the value of the mass access alert feature when it was triggered after abnormal server access. An employee had mistakenly deleted 400 MB of files. Thanks to FileAudit, he identified the user immediately and fixed the issue.
With FileAudit, Ayuntamiento Villanueva de la Cañada has achieved ENS compliance.
FileAudit provides actionable information about all access to folders, files, and file shares. It allows IT to show proper access controls and reporting tools are in place to protect data against unauthorized access.
FileAudit's alerts and reports also make IT forensics easier, since IT can pull all file access history in case of a security issue.
To learn more about how file auditing helps meet compliance objectives, read the whitepaper The Role of File Auditing in Compliance.