When Security Needs Scale: Partnering with Support for Data Exposure Remediation
When institutions identify broadly shared sensitive data in cloud collaboration platforms, the challenge is rarely detection alone. The harder work is remediation at scale: validating findings, prioritizing outreach, helping clients respond, and reducing exposure quickly without creating unnecessary friction. In this session, we share how one university used a support-led, security-partnered model to move from limited remediation capacity to rapid, high-volume cleanup in just weeks, achieving a 95% reduction in sensitive data exposure through shared links.
Rather than treating remediation as solely security-owned work, the institution combined information security’s expertise in risk, policy, and rule tuning with support’s strengths in service ownership, client communication, prioritization, and operational follow-through. Senior support staff were also trained to review detections and help distinguish between cases needing incident response and those better handled as support conversations, expanding response capacity while preserving strong security partnership.
Attendees will leave with a practical framework for deciding where security-adjacent remediation work should live, how to structure an effective partnership between support and security, and how to accelerate sensitive data cleanup while protecting the client experience in resource-constrained higher education environments.
Presenters
-
Jacob Farmer
Director, Enterprise Services,
Indiana University
-
Tim Goth
Deputy CISO,
Indiana University
-
Steve Rizzi
Systems Administration Leader,
Indiana University