Protection of sensitive data

[Dacki]

Hello everyone !

I have several products on my servicenow platform (ITSM, SPM, etc...).
To secure the company's sensitive data, I would like to know if the different products are compartmentalized and separated. For example, ITSM users with ITSM roles cannot see SPM objects and tables, and vice versa.
How can I technically check this without testing by role and by table?
There's also the question of cross-functional tables such as the users table.

Do you have any idea how I can verify the strict separation between products and the confidentiality and security of sensitive data?
Perhaps "Data privacy", ACL.... are part of the solution?

Thank you in advance for your feedback.

[Daniel Borkowi1 · Accepted solution]

Hi @Dacki,

as Platform Administrator I'm also interested what other uses for automated regular ACL Assessments, so I will follow this thread.

Two apps can help to verify Access on tables:

1. Identity and Access Audit
2. Access Analyzer

First you can use to check users and their access.

The Second App helps to understand changes made for users, groups, roles, and ACLs. But both are not directly what you are looking for. 

Greets
Daniel

Please mark reply as Helpful/Correct, if applicable. Thanks! 

[Dacki]

Hi Daniel,

Thank you very much for your reply.
The two proposals (Identity and Access Audit and Access Analyzer) don't really correspond directly to my needs, but it's very interesting for monitoring access.

Best regards

Dacki

[Daniel Borkowi1]

@Dacki yes unfortunately not what you searching for. Regards monitoring I also recommend to check the dashboards in the Security Center https://your_instance.service-now.com/now/security-center/home.Greets
Daniel

Please mark reply as Helpful/Correct, if applicable. Thanks!

[Dacki]

Hi Daniel,

I found some interesting information on the link you shared.
Thank you very much.