Enhancing data governance in MFT operations: a real-world example with Axway MFT solutions

In today’s data-driven world, the need for robust Data Governance (DG) practices has never been more critical, especially within Managed File Transfer (MFT) operations. At Axway, we understand the complexities and challenges organizations face when handling sensitive data across various business processes.

In this blog post, we’ll explore a real-world example of how a leading health insurer in California integrated DG with MFT operations, and how Axway’s MFT solutions can play a pivotal role in streamlining these processes.

The importance of data governance in MFT

Data governance is essential in ensuring that sensitive data is handled securely and in compliance with regulatory requirements. For organizations dealing with vast amounts of data, such as health insurers, the stakes are even higher. Implementing effective DG practices within MFT operations ensures that sensitive information, such as patient data, is exchanged securely with external partners, including medical providers and analytical partners.

Data governance in action: Axway’s leadership on privacy and security

However, integrating DG into MFT is not without its challenges. Initial efforts often involve standardizing data exchanges, validating the sharing of sensitive information, and ensuring that external partners can continue to provide quality services.

This balance is crucial for maintaining both security and operational efficiency.

Overcoming challenges with Axway solutions

In the case of the health insurer, three primary challenges arose during the integration of DG with MFT operations:

1. Manual reporting of outbound transfers: The Enterprise Data Governance (EDG) team needed a monthly report of outbound file transfers to validate against their records. Initially, this was a manual process, requiring significant time and effort from MFT engineers.
2. Complexity of log access: The EDG team was granted access to their SIEM (Splunk) for file transfer logs, but the interface proved challenging and highly technical to filter and search, leading to frequent requests for assistance from the MFT engineers.
3. Lack of visibility: The EDG team was not allowed access to the MFT solution to validate flow configurations, such as verifying PGP encryption or whether connections used certificates or keys instead of passwords.

To address these challenges, the organization implemented solutions that not only streamlined processes but also significantly enhanced their EDG’s capabilities. With Axway’s SecureTransport (MFT gateway) and Sentinel (visibility & analytics) solutions, these improvements were taken to the next level.

Leveraging Axway’s SecureTransport and Sentinel solutions

Metadata integration for streamlined reporting: By incorporating EDG identifiers and other relevant metadata, such as ETL numbers, into the file transfer routes within Axway’s SecureTransport, the organization was able to automate the reporting process.

The EDG team could now easily query both Sentinel’s Database and their own EDG Database to validate outbound transfers, reducing manual efforts and increasing accuracy. Axway SecureTransport’s ability to incorporate metadata into file transfer events made this integration seamless and efficient. 

User-friendly portal powered by Sentinel: To further empower the EDG team, the organization developed an intuitive self-service portal connected to Axway’s SecureTransport via APIs and to both the Sentinel Database and EDG Database.

This portal provided real-time insights into MFT flow configurations, stripping away technical complexities and focusing on the most relevant information. The result was a self-service experience that significantly reduced the EDG team’s dependency on the MFT engineers.

The key benefits realized include:

• Complete visibility: By leveraging SecureTransport APIs and Sentinel’s Database, the EDG team gained comprehensive insight into outbound transfers, including critical details like PGP encryption status and communication protocols, ensuring that all data was securely handled.
• Automated reporting: Axway’s Sentinel solution enabled the automation of dashboards and reports, allowing the EDG team to identify and address areas of concern quickly.
• Instant control: In the event of a potential DG violation, the EDG team could instantly disable outbound deliveries via the portal (SecureTransport APIs), ensuring immediate action and compliance.
• Operational efficiency: By automating and streamlining DG processes, the organization significantly reduced the time and resources required for validation, allowing the EDG team to become largely self-sufficient.

Responding swiftly to data breaches

One of the most significant advantages of integrating Axway’s SecureTransport and Sentinel solutions into DG processes was the enhanced ability to respond to data breaches. If an external partner experienced a breach, the organization could quickly halt all transmissions to the affected partner.

Axway’s solutions provided the necessary insights to identify the files exchanged, what internal system and ETL job produced the files, and ultimately, which members’ data was exposed, allowing for targeted and precise communication with the impacted individuals.

See also: Enabling Secure MFT as Data Breaches Rise

At Axway, we are committed to helping organizations achieve their data governance objectives while maintaining the highest standards of security and efficiency in MFT operations. The integration of DG with Axway’s SecureTransport and Sentinel solutions not only enhances visibility and control but also ensures that sensitive data is handled with the utmost care.

As data governance continues to evolve, Axway remains at the forefront, providing the tools and solutions necessary for organizations to navigate these complexities with confidence.