Thales has introduced CipherTrust Data Security Posture Management (DSPM), a solution crafted to enhance data security. This new DSPM tool aims to assist organisations in prioritising risks and safeguarding their sensitive data through encryption, masking, or tokenisation directly within the platform, instead of merely identifying vulnerable data and applying access-based remedies.
In the modern digital landscape, sensitive data is increasingly dispersed across various areas such as cloud infrastructures, SaaS applications, on-premises systems, and more. The challenge intensifies as AI technologies enable quicker data movement across new repositories and workflows, surpassing the capabilities of traditional data governance.
Sensitive data discovery and protection
Security teams require comprehensive insight into sensitive data – beyond just location and access details. The CipherTrust DSPM platform meets these needs by providing a unified service that allows organisations to discover sensitive data risks, prioritise them, and take immediate protection measures. It offers advanced remediation through policy enforcement and workflows that automatically encrypt, tokenise, or mask exposed data, facilitating seamless action from identification to protection on a single platform.
Todd Moore, Thales' Vice President of Data Security Products, emphasised the need for actionable data security solutions, stating, “Organisations don’t need another security tool that simply gives them a longer list of problems to investigate. They need to understand which sensitive data is truly at risk and take direct action to reduce it.” Unlike typical DSPM systems that focus solely on access restrictions, CipherTrust DSPM extends protection by linking risks to direct actions like encryption, focusing on securing the data itself.
Effective data governance ahead of AI scaling
Organisations can link their findings to suitable data protections, address critical access-control risks
Through combining data discovery with access and activity contexts, the platform identifies inappropriate exposures and enables governance before the scale-up of AI deployments. Its AI-driven behavioural analytics can detect unusual activities, helping security teams respond more rapidly to potential threats, including insider risks.
Organisations can link their findings to suitable data protections, address critical access-control risks, and receive actionable remediation guidance from the platform. Building on Thales' decades-long expertise in data protection and management, CipherTrust DSPM offers comprehensive risk visibility across different environments, integrating Thales' capabilities for encryption, tokenisation, and masking.
Addressing cybersecurity challenges with precision
According to Hiroji Sugito, Principal Data Security Engineer at Tokyo Electron Device, “CipherTrust DSPM’s ease of deployment and the accuracy of its data classification enables us to help customers quickly gain understanding of where their sensitive data is, who or what can access it, how to protect it, and without slowing AI adoption.” This capability is crucial as businesses aim to integrate AI without compromising the security of their sensitive data.
Thales, a pioneer in advanced technologies for cybersecurity markets, today announced CipherTrust Data Security Posture Management (DSPM). It is the first purpose-built DSPM offering designed to help organisations go beyond discovering exposed sensitive data and applying access-based remediation, enabling them to prioritise risks and protect their most sensitive data directly through encryption, masking, or tokenisation natively within the platform.
Sensitive data is increasingly distributed across cloud infrastructure, SaaS applications, on-premises systems, analytics environments and third parties. AI is accelerating the challenge as copilots, applications and agents gain access to enterprise data and information moves into new repositories and workflows much faster than traditional governance can keep pace.
Sensitive-data discovery
Security teams need to understand more than just where sensitive data resides. They need visibility into who or what can access it, how it is being used, which exposures pose the greatest risk and, most importantly, how to automatically reduce that risk.
CipherTrust DSPM addresses these needs in a unified “as-as-service” platform, enabling organisations to discover and analyse sensitive data risks, prioritise what matters most, and take action to protect their data with remediation that goes beyond just managing permissions and access controls. This solution provides more robust remediation through integrated policy enforcement and workflows that automatically encrypt, tokenise or mask exposed sensitive data, so security teams can move from insight to action without leaving the platform. Visibility, control and protection operate on the same platform, enabling faster risk reduction and stronger data security outcomes. The platform combines sensitive-data discovery and classification with posture, access, activity, and behavioural context to prioritise material risks.
AI deployments scale
“Organisations don’t need another security tool that simply gives them a longer list of problems to investigate,” Todd Moore, Vice President of Data Security Products at Thales, said. “They need to understand which sensitive data is truly at risk and take direct action to reduce it. While traditional DSPM remediation often focuses on restricting who can access data, CipherTrust DSPM goes further by connecting risks to protections such as encryption and tokenisation, helping protect the data itself, rather than relying on permissions alone.”
CipherTrust DSPM combines sensitive-data discovery with access, entitlement and activity context to identify inappropriate exposure and govern data before AI deployments scale. AI-driven behavioral analytics detect unusual access and activity, correlating signals into attack chains that help security teams investigate and respond faster to threats such as insider risk.
Actionable remediation guidance
Organisations can connect findings to data protections, address supported access-control risks and receive actionable remediation guidance. The approach builds on more than 30 years of Thales expertise in data discovery, protection, key management, access control and activity analysis.
CipherTrust DSPM provides discovery and risk visibility for both structured and unstructured data across cloud, on-premises and hybrid sources. Integrated with Thales data protection capabilities, it enables organisations to move from identifying risk to protecting sensitive data with encryption, tokenisation and masking across these diverse environments.
Complex cybersecurity challenges
“Tokyo Electron Device works with enterprises to address increasingly complex cybersecurity challenges as these organisations connect AI tools and agents to more of their business data. CipherTrust DSPM’s ease of deployment and the accuracy of its data classification enables us to help customers quickly gain understanding of where their sensitive data is, who or what can access it, how to protect it, and without slowing AI adoption. These capabilities provide significant value to customers looking to embrace AI while, maintaining control of their most sensitive information,” Hiroji Sugito, Principal Data Security Engineer at Tokyo Electron Device, said.
