Sécurité des fichiers: identification et réduction des risques

Jean-Pierre Pelletier, co-founder and VP of product and client success at Qohash, argues that breaches usually start not with servers but with unstructured files scattered on workstations, shared drives and SharePoint, and that connecting such data to GenAI tools like Copilot multiplies the risk. He rejects the two most common reflexes he sees from clients, blanket quarantine-and-delete policies and turning on a DLP tool and hoping it blocks everything, because both ignore how business value chains actually move information and end up breaking legitimate work. Instead he presents a three-phase risk-reduction cycle built from Qohash deployments: visibility first, using workstation agents to inventory sensitive data like social insurance numbers across files; action second, tackling high-risk people and data sources (downloads folders, recycle bins, files untouched over a year) with change management rather than mass deletion; and continuous control third, applying alerts and Microsoft Purview labeling once the initial cleanup is done. He illustrates the human dimension with real anonymized cases of a social insurance number spread across dozens of files and shared with many people over years, and closes with an audience Q&A on phasing, working alongside Purview, and using external consultants like KPMG to get executive buy-in.