Quick Reference about Spirion (formerly IDF) & Remediation

Here's a quick reference sheet about Spirion (formerly Identity Finder) and what you need to do to remediate (securely shred or scrub) a document with PII.

If you aren't sure what PII is and why your computer is being scanned with Spirion, please take a look at our FAQ about PII Scanning, then return here.

Am I required to run IDF on my computer and attached drives and remediate the scan results?

Yes, because of the growing number of security threats today, Penn State requires that each of its units and campuses identify, remove, and/or protect Personally Identifiable Information (PII) on all Penn State desktops, laptops, and servers.

You need to take the time and remove PII by securely shredding or scrubbing the data. As necessary, you can also choose to ignore PII false positives from the Results list.

How do I remediate?

Note: If Spirion returns results on a shared drive, work with the other users of those files to remediate.

Note: If Spirion returns results in a database file, we recommend that you manually clean the file and not shred the file.

  • If Spirion finds a false positive (such as ISBN numbers, account numbers, zip codes, etc. AND when you look at the series of numbers and the context in which it is used, you are assured that it is not PII), you have two options to ignore the false positive. You can ignore just one instance of suspected PII from a file by using the Ignore Match option, or you can ignore the entire file (if multiple instances are identified in the same file) by selecting the Ignore Location option. In future scans, Spirion will ignore this instance or file and move on to the other documents to be scanned, saving you the trouble of seeing this item again.
  • If the file does contain PII, and you need the file, you should clean the file manually. You need to leave Spirion, open the file, remove the PII, and do a Save As with a new name. This creates a clean copy without the PII. You can then go back to the scan results screen shred the file with the PII using Spirion.
  • If the file does contain PII, and you do not need the file, you should shred it. This action will securely and permanently delete the file completely from your computer.

When I am done remediating, what should I do?

You can click the X to close the program.

Will I need to scan for PII again?

  • Yes. If you are using the current version of Spirion and your IDF communicates to our console, then scans will automatically run approximately every 3 weeks. If PII or PII false positives are found, you will need to take the time and remediate again.

Note: If Spirion does not scan automatically every 3 weeks, please contact Ag IT to get TEM and the latest version of Spirion.

Why do I need to remediate?

  • If your computer is compromised and has been scanned for PII recently, the turnaround time for you to get your computer back is significantly shorter.
  • If your computer is compromised and has not been scanned for PII recently, it could take a few months to have it returned to you.

What does compromised mean?

If your computer has been compromised, it has been maliciously broken into by a person or an application without your knowledge and it must be rebuilt by Ag IT.