The solution is used for data classification by type, auditing access, and for the use of any type of data sets, from file server to SQL server.
It's used for compliance management, auditing, and tracking as a part of the CMMC regulations. For Department of Defense and supply chain organizations, CMMC is the new governing standard, which used to be for NIST 800-71. They're a set of controls and predefined methodologies for organizations to validate what they're doing to prevent bad guys from coming in and good data from going out, inadvertently or intentionally.
There are about 120 people on staff at a given time who use this solution and have access to class-controlled data.
We have evaluated Netwrix Auditor as a product solution to meet compliance management needs for an engagement we're working on. We're a Netwrix partner, and we're resellers.
It maintains audit logs for the duration of time that you wish, as long as you have the storage capacity to do so.
It's a very solid software product that allows you to meet those needs. You simply install the agent and the server in the environment, and you can run the application. For the most part, it does the work for you. There are some classifications that you need to put in place. From there, it provides you with a single pane of glass to monitor, validate, and essentially audit use and data type classifications.