Sensitive Data at Rest Check

Counts regulated data at rest and checks drive encryption.

What it is

If you say yes, it opens the files under Desktop, Documents, Downloads and Pictures and counts those holding Social Security numbers, card numbers, bank account pairs, dates of birth, medical record numbers or CUI markings. Counts per folder only; never a value or file name.

A lost laptop or a ransomware crew takes whatever sits in ordinary folders. If those folders hold patient records, card numbers or a client's tax forms, the loss becomes a notification, a fine or a lost client. This check tells you how much regulated data sits where, and whether the drive it sits on is encrypted, so you can move it, encrypt it or delete it.

What it checks

• Social Security numbers, card numbers, bank account pairs, dates of birth beside a name, medical record and claim numbers and CUI markings inside the files in your Desktop, Documents, Downloads and Pictures (counts per folder and pattern; never a value, never a file name)
• One extra folder you name, read the same way
• Whether the drive holding those files is encrypted at rest (BitLocker's own state, read and never changed)
• How much was and was not read: the file and time caps, and the files it could not open

Who it is for

• A practice, firm or office that keeps client, patient or card data in ordinary folders
• A contractor handling controlled unclassified information
• Anyone preparing for an examiner's question about data at rest

Before it runs: one question you can say no to

• Open the files in your user folders to count regulated-data patterns? This whole check is optional and off unless you say yes. It opens the files under Desktop, Documents, Downloads and Pictures to count Social Security number, card number, bank account, date-of-birth, medical record and CUI-marking patterns. It keeps counts only: no value, no file name, no path below the second folder level.

Price

$39 one-time. Also a member of 7 Industries bundle(s): Healthcare Practice Hardening Bundle; Financial Services Hardening Bundle; Defense Contractor Readiness Bundle; Law Firm Hardening Bundle; Public Office Hardening Bundle; School & Campus Hardening Bundle; Non-Profit & Charity Hardening Bundle.

What it never does

It never changes a setting, installs anything, tries a password or signs in to an account. Where a check reads inside files it reports counts only — never a value, a file name or a path. Nothing is exploited and no credential is guessed. Your own answers are recorded as yours and never upgraded into something the scan observed.