# Data Security Posture Management (DSPM) Assessment

> Scoped per engagement · Cloud & Application Security · https://cisomarketplace.services/services/data-security-posture-management-dspm-assessment

Discover known and shadow data across cloud and on-prem, classify sensitive data, map access and flows, and remediate exposure. Establishes a continuous data security posture aligned to privacy regimes.

## In scope

- Data discovery (cloud + on-prem + shadow)
- Classification of sensitive/regulated data
- Access & entitlement mapping
- Data flow & exposure analysis
- Remediation prioritization

## Deliverables

- DSPM assessment report
- Data inventory & classification
- Exposure & access findings
- Remediation roadmap

## Tiers

### Essential: scoped

Discovery and classification of up to 10 priority data stores in up to 2 cloud accounts. Cloud only. Delivers a data inventory with sensitivity classes and a list of exposed stores.

Limits: cloud accounts 2

Includes:
- Up to 10 priority data stores
- Up to 2 cloud accounts
- Sensitive/regulated data classification
- Data inventory and exposure findings

Excludes:
- On-prem data stores
- Access and entitlement mapping
- Data flow analysis
- Shadow data discovery beyond the named stores

### Advanced: scoped

DSPM assessment across up to 10 cloud accounts and up to 3 on-prem locations, up to 50 data stores including shadow-data discovery, with access/entitlement mapping, data flow and exposure analysis and a prioritized remediation roadmap.

Limits: cloud accounts 10, locations 3

Includes:
- Up to 50 data stores, cloud and on-prem
- Shadow data discovery
- Access and entitlement mapping
- Data flow and exposure analysis
- Remediation roadmap

Excludes:
- Ongoing monitoring after the report
- Remediation implementation
- Data governance operating model

### Enterprise: scoped

Continuous DSPM program with monitoring + governance

Limits: cloud accounts 25, locations 5

Excludes:
- DSPM tool licence costs
- Hands-on remediation in your systems
- Privacy legal advice

## Terms

Starting price shown is the lowest published tier. A written proposal fixes scope, tier and price before anything is signed. Timeline is set in the SOW.

Scope this engagement: https://cisomarketplace.services/scope?service=data-security-posture-management-dspm-assessment