Thales, known for its contributions to cybersecurity technology, has launched CipherTrust Data Security Posture Management (DSPM), a tool that goes beyond merely identifying exposed sensitive data. This proprietary DSPM solution empowers organizations to address risks to their sensitive data more effectively through encryption, masking, or tokenization, directly from within the platform.
In today's data landscape, sensitive information is scattered across cloud services, SaaS platforms, on-premises environments, analytics systems, and third-party applications. The advancement of AI technologies complicates this further, as AI-driven processes access enterprise data, shifting information quickly into new repositories and workflows, which can outpace traditional governance methods.
Sensitive Data Discovery
For security teams, comprehending the presence and nuances of sensitive data is crucial. Understanding who has access, how the data is used, key exposure risks, and methods for automatic risk reduction becomes essential.
For security teams, comprehending the presence and nuances of sensitive data is crucial
CipherTrust DSPM addresses these challenges by providing an integrated "as-a-service" platform that allows organizations to not only discover and analyze data risks but also take proactive steps to secure data through advanced remediation strategies. These include encrypting, tokenizing, or masking sensitive data directly within the platform, allowing security teams to transition from awareness to action seamlessly. The unified platform enhances visibility, control, and protection, optimizing data security measures.
AI Deployments and Security
Todd Moore, Vice President of Data Security Products at Thales, emphasizes the need for effective data protection, "Organizations don’t need another security tool that simply gives them a longer list of problems to investigate. They need to understand which sensitive data is truly at risk and take direct action to reduce it. While traditional DSPM remediation often focuses on restricting who can access data, CipherTrust DSPM goes further by connecting risks to protections such as encryption and tokenisation, helping protect the data itself, rather than relying on permissions alone.”
The platform integrates sensitive-data discovery with access entitlements and activity context, identifying exposure and managing data governance before AI deployments become extensive. AI-driven behavioral analytics provide early detection of unusual access and behavior patterns, forming attack chains that aid in quicker threat response by security teams.
Guidance for Actionable Remediation
CipherTrust DSPM addresses the evolving challenges faced by security teams
With CipherTrust DSPM, organizations gain the ability to link findings to data protection measures, mitigate access-control risks, and receive actionable guidance on remediation. Building on Thales’ 30 years of expertise in data discovery and protection, the solution offers comprehensive visibility for both structured and unstructured data across various environments—cloud, on-premises, or hybrid.
Hiroji Sugito, Principal Data Security Engineer at Tokyo Electron Device, notes the platform’s significance, "Tokyo Electron Device works with enterprises to address increasingly complex cybersecurity challenges as these organizations connect AI tools and agents to more of their business data. CipherTrust DSPM’s ease of deployment and the accuracy of its data classification enables us to help customers quickly gain understanding of where their sensitive data is, who or what can access it, how to protect it, and without slowing AI adoption. These capabilities provide significant value to customers looking to embrace AI while maintaining control of their most sensitive information.”
Incorporating these robust features, CipherTrust DSPM addresses the evolving challenges faced by security teams, ensuring sensitive data remains protected across a variety of technological landscapes.
Thales, a pioneer in advanced technologies for cybersecurity markets, today announced CipherTrust Data Security Posture Management (DSPM). It is the first purpose-built DSPM offering designed to help organizations go beyond discovering exposed sensitive data and applying access-based remediation, enabling them to prioritise risks and protect their most sensitive data directly through encryption, masking, or tokenisation natively within the platform.
Sensitive data is increasingly distributed across cloud infrastructure, SaaS applications, on-premises systems, analytics environments and third parties. AI is accelerating the challenge as copilots, applications and agents gain access to enterprise data and information moves into new repositories and workflows much faster than traditional governance can keep pace.
Sensitive-data discovery
Security teams need to understand more than just where sensitive data resides. They need visibility into who or what can access it, how it is being used, which exposures pose the greatest risk and, most importantly, how to automatically reduce that risk.
CipherTrust DSPM addresses these needs in a unified “as-as-service” platform, enabling organizations to discover and analyze sensitive data risks, prioritise what matters most, and take action to protect their data with remediation that goes beyond just managing permissions and access controls. This solution provides more robust remediation through integrated policy enforcement and workflows that automatically encrypt, tokenise or mask exposed sensitive data, so security teams can move from insight to action without leaving the platform. Visibility, control and protection operate on the same platform, enabling faster risk reduction and stronger data security outcomes. The platform combines sensitive-data discovery and classification with posture, access, activity, and behavioral context to prioritise material risks.
AI deployments scale
“Organizations don’t need another security tool that simply gives them a longer list of problems to investigate,” Todd Moore, Vice President of Data Security Products at Thales, said. “They need to understand which sensitive data is truly at risk and take direct action to reduce it. While traditional DSPM remediation often focuses on restricting who can access data, CipherTrust DSPM goes further by connecting risks to protections such as encryption and tokenisation, helping protect the data itself, rather than relying on permissions alone.”
CipherTrust DSPM combines sensitive-data discovery with access, entitlement and activity context to identify inappropriate exposure and govern data before AI deployments scale. AI-driven behavioral analytics detect unusual access and activity, correlating signals into attack chains that help security teams investigate and respond faster to threats such as insider risk.
Actionable remediation guidance
Organizations can connect findings to data protections, address supported access-control risks and receive actionable remediation guidance. The approach builds on more than 30 years of Thales expertise in data discovery, protection, key management, access control and activity analysis.
CipherTrust DSPM provides discovery and risk visibility for both structured and unstructured data across cloud, on-premises and hybrid sources. Integrated with Thales data protection capabilities, it enables organizations to move from identifying risk to protecting sensitive data with encryption, tokenisation and masking across these diverse environments.
Complex cybersecurity challenges
“Tokyo Electron Device works with enterprises to address increasingly complex cybersecurity challenges as these organizations connect AI tools and agents to more of their business data. CipherTrust DSPM’s ease of deployment and the accuracy of its data classification enables us to help customers quickly gain understanding of where their sensitive data is, who or what can access it, how to protect it, and without slowing AI adoption. These capabilities provide significant value to customers looking to embrace AI while, maintaining control of their most sensitive information,” Hiroji Sugito, Principal Data Security Engineer at Tokyo Electron Device, said.
