NYDFS 2.0: New Cybersecurity Requirements and Enforcement

In today’s data-driven world, organizations are dealing with more information than ever before. Data pours in from countless production systems and applications, and data analysts are tasked with making sense of it all - fast. To extract valuable insights, teams rely on powerful analytics platforms like Snowflake, Databricks, BigQuery, and Redshift. These tools make it easier to store, process, and analyze data at scale.

‍

But while these platforms are excellent at managing raw data, they don't solve one of the most critical challenges organizations face: understanding and securing that data.

That’s where metadata catalogs come in.

Metadata Catalogs Are Essential But They’re Not Enough

Metadata catalogs such as AWS Glue, Hive Metastore, and Apache Iceberg are designed to bring order to large-scale data ecosystems. They offer a clear inventory of datasets, making it easier for teams to understand what data exists, where it’s stored, and who is responsible for it.

‍

This organizational visibility is essential. With a good catalog in place, teams can collaborate more efficiently, minimize redundancy, and boost productivity by making data discoverable and accessible.

But while these tools are great for discovery, they fall short in one key area: security. They aren’t built to detect risky permissions, identify regulated data, or prevent unintended exposure. And in an era of growing privacy regulations and data breach threats, that’s a serious limitation.

Different Data Tools, Different Gaps

It’s also important to recognize that not all tools in the data stack work the same way. For example, platforms like Snowflake and BigQuery come with fully managed infrastructure, offering seamless integration between storage, compute, and analytics. Others, like Databricks or Redshift, are often layered on top of external cloud storage services like S3 or ADLS, providing more flexibility but also more complexity.

‍

Metadata tools have similar divides. AWS Glue is tightly integrated into the AWS ecosystem, while tools like Apache Iceberg and Hive Metastore are open and cloud-agnostic, making them suitable for diverse lakehouse architectures.

This variety introduces fragmentation, and with fragmentation comes risk. Inconsistent access policies, blind spots in data discovery, and siloed oversight can all contribute to security vulnerabilities.

The Blind Spots Metadata Can’t See

Even with a well-maintained catalog, organizations can still find themselves exposed. Metadata tells you what data exists, but it doesn’t reveal when sensitive information slips into the wrong place or becomes overexposed.

This problem is particularly severe in analytics environments. Unlike production environments, where permissions are strictly controlled, or SaaS applications, which have clear ownership and structured access models, data lakes and warehouses function differently. They are designed to collect as much information as possible, allowing analysts to freely explore and query it.

‍

In practice, this means data often flows in without a clear owner and frequently without strict permissions. Anyone with warehouse access, whether users or automated processes, can add information, and analysts typically have broad query rights across all data. This results in a permissive, loosely governed environment where sensitive data such as PII, financial records, or confidential business information can silently accumulate. Once present, it can be accessed by far more individuals than appropriate.

‍

The good news is that the remediation process doesn't require a heavy-handed approach. Often, it's not about managing complex permission models or building elaborate remediation workflows. The crucial step is the ability to continuously identify and locate sensitive data, understand its location, and then take the correct action whether that involves removal, masking, or locking it down.

How Sentra Bridges the Gap Between Data Visibility & Security

This is where Sentra comes in.

Sentra’s Data Security Posture Management (DSPM) platform is designed to complement and extend the capabilities of metadata catalogs, not just to address their limitations, but to elevate your entire data security strategy. Instead of replacing your metadata layer, Sentra works alongside it enhancing your visibility with real-time insights and powerful security controls.

‍

Sentra scans across modern data platforms like Snowflake, S3, BigQuery, and more. It automatically classifies and tags sensitive data, identifies potential exposure risks, and detects compliance violations as they happen.

With Sentra, your metadata becomes actionable.

From Static Maps to Live GPS

Think of your metadata catalog as a map. It shows you what’s out there and how things are connected. But a map is static. It doesn’t tell you when there’s a roadblock, a detour, or a collision. Sentra transforms that map into a live GPS. It alerts you in real time, enforces the rules of the road, and helps you navigate safely no matter how fast your data environment is moving.

Conclusion: Visibility Without Security Is a Risk You Can’t Afford

Metadata catalogs are indispensable for organizing data at scale. But visibility alone doesn’t stop a breach. It doesn’t prevent sensitive data from slipping into the wrong place, or from being accessed by the wrong people.

To truly safeguard your business, you need more than a map of your data—you need a system that continuously detects, classifies, and secures it in real time. Without this, you’re leaving blind spots wide open for attackers, compliance violations, and costly exposure.

‍

Sentra turns static visibility into active defense. With real-time discovery, context-rich classification, and automated protection, it gives you the confidence to not only see your data, but to secure it.

‍

See clearly. Understand fully. Protect confidently with Sentra.

‍

<blogcta-big>

Introduction

We’re excited to announce that Sentra has officially achieved TX-RAMP certification, a significant milestone that underscores our commitment to delivering trusted, compliant, and secure cloud data protection.

‍

The Texas Risk and Authorization Management Program (TX-RAMP) establishes rigorous security standards for cloud products and services used by Texas state agencies. Achieving this certification validates that Sentra meets and exceeds these standards, ensuring our customers can confidently rely on our platform to safeguard sensitive data.

‍

For agencies and organizations operating in Texas, this means streamlined procurement, faster adoption, and the assurance that Sentra’s solutions are fully aligned with state-mandated compliance requirements. For our broader customer base, TX-RAMP certification reinforces Sentra’s role as a trusted leader in data security posture management (DSPM) and our ongoing dedication to protecting data everywhere it lives.

What is TX-RAMP?

The Texas Risk and Authorization Management Program (TX-RAMP) is the state’s framework for evaluating the security of cloud solutions used by public sector agencies. Its goal is to ensure that organizations working with Texas state data meet strict standards for risk management, compliance, and operational security.

‍

TX-RAMP certification focuses on key areas such as:

‍

• Audit & Accountability: Ensuring system activity is monitored, logged, and reviewed.
• System Integrity: Protecting against malicious code and emerging threats.
• Access Control: Managing user accounts and privileges with least-privilege principles.
• Policy & Governance: Establishing strong security policies and updating them regularly.
  
  

By certifying vendors, TX-RAMP helps agencies reduce risk, streamline procurement, and ensure sensitive state and citizen data is well protected.

Why TX-RAMP Certification Matters

For Texas agencies, TX-RAMP certification means trust and speed. Working with a certified partner like Sentra simplifies procurement, reduces onboarding time, and provides confidence that solutions meet the state’s toughest security requirements.

‍

For enterprises and organizations outside Texas, this milestone is just as meaningful. TX-RAMP certification validates that Sentra’s DSPM platform can meet and go beyond some of the most demanding compliance frameworks in the U.S. It’s another proof point that when customers choose Sentra, they are choosing a solution built with security, accountability, and transparency at its core.

Sentra’s Path to TX-RAMP Certification

Achieving TX-RAMP certification required proving that Sentra’s security controls align with strict state requirements.

‍

Some of the measures that demonstrate compliance include:

‍

• Audit and Accountability: Continuous monitoring and quarterly reviews of audit logs under SOC 2 Type II governance.
  
• System and Information Integrity: Endpoint protection and weekly scans to prevent, detect, and respond to malicious code.
  
• Access Control: Strong account management practices using Okta, BambooHR, MFA, and quarterly access reviews.
  
• Change Management and Governance: Structured SDLC processes with documented requests, multi-level approvals, and complete audit trails.
  
  

Together, these safeguards show that Sentra doesn’t just comply with TX-RAMP - we exceed the requirements, embedding security into every layer of our operations and platform.

What This Means for Sentra Customers

For Texas agencies, TX-RAMP certification makes it easier and faster to adopt Sentra’s platform, knowing that it has already been vetted against the state’s most stringent standards.

For global enterprises, it’s another layer of assurance: Sentra’s DSPM solution is designed to stand up to the highest levels of compliance practice, giving customers confidence that their most sensitive data is secure - wherever it lives.

Conclusion

Earning TX-RAMP certification is a major milestone in Sentra’s journey, but it’s only part of our broader mission: building trust through security, compliance, and innovation.

‍

This recognition reinforces Sentra’s role as a leader in data security posture management (DSPM) and gives both public sector and private enterprises confidence that their data is safeguarded by a platform designed for the most demanding environments.

<blogcta-big>

October is shaping up to be a big month for Sentra! From coast to coast, our team will be meeting with security leaders to share insights on securing sensitive data - no matter where it travels.

‍

If you’re attending one of these top cybersecurity conferences, we’d love to connect and show you how Sentra helps organizations embrace innovation while keeping data secure. Here’s where you can find us this month:

Hou.Sec.Con: September 30–October 1, Houston, TX

We’re kicking off in Texas at Hou.Sec.Con, one of the region’s most anticipated security conferences. It’s a hub for IT and cybersecurity professionals looking to explore new ways to defend against today’s evolving threats.

Stop by and learn how Sentra helps organizations protect sensitive data across cloud environments.

Trace3 Evolve: September 30–October 3, Las Vegas, NV

Next up is Trace3 Evolve, where IT leaders and innovators gather to discuss the future of enterprise technology. With cloud adoption accelerating, conversations around data security, compliance, and innovation are more important than ever.

Meet our team to see how Sentra makes securing sensitive data simple and scalable.

GuidePoint GPSEC Security Forum: October 3, Dallas, TX

We’re heading back south to attend GuidePoint GPSEC Security Forum in Dallas which will bring together industry leaders, cybersecurity experts, and technology innovators for a full day of impactful conversations, networking, and hands-on learning. This conference will dive into today’s most pressing security challenges through dynamic keynote speakers, engaging breakout sessions, and a bustling vendor fair. 

Whether you're dealing with data sprawl, compliance complexity, or risk visibility, Sentra will be on-site to show how their platform helps reduce risk and strengthen security posture without slowing innovation.

GrrCON: October 2–3, Grand Rapids, MI

Heading north, we’ll be at GrrCON, a favorite for security practitioners, researchers, and executives alike. Known for its community-driven feel, this event fosters knowledge-sharing and collaboration.

Let’s chat about modern approaches to cloud data security and how to mitigate risk without slowing innovation.

Innovate Cybersecurity Summit: October 5–7, Scottsdale, AZ

We’re excited to join the Innovate Cybersecurity Summit, where industry leaders explore solutions to today’s toughest challenges in data protection and cyber defense.

Learn how Sentra empowers organizations to gain visibility into their sensitive data and take proactive steps to secure it.

FS-ISAC Scottsdale: October (Dinner & Meetings)

We will be in Scottsdale during FS-ISAC, a premier financial services cybersecurity community event.

Sentra will be hosting a private dinner where attendees can connect in an intimate setting. We’ll also be available for 1:1 meetings to discuss how Sentra helps financial institutions protect sensitive data and comply with complex regulatory requirements.

‍

This is a great chance to meet our team and hear how we partner with organizations to balance innovation and data protection.

Gartner Symposium: October 20–23, Orlando, FL

One of the year’s biggest IT events, the Gartner Symposium brings together CIOs, CISOs, and technology leaders to discuss the future of digital business.

‍

Sentra will be on-site at Booth #748, where our team will showcase how a data-first security approach empowers organizations to innovate confidently while ensuring sensitive information remains protected. Stop by to connect with our experts and learn how Sentra helps enterprises stay secure in the cloud era.

NYC Google Event: October 21, New York, NY

We’ll also be in New York City at the Google Event, connecting with forward-thinking organizations adopting cutting-edge cloud technologies.

Discover how Sentra seamlessly integrates with Google Cloud to protect sensitive data wherever it lives.

InfoSec World: October 27–29, Lake Buena Vista, FL

We’re wrapping up the month at InfoSec World, a leading cybersecurity event bringing together professionals from across industries.

Stop by to learn how Sentra helps organizations strengthen data security strategies and stay ahead of regulatory demands.

GuidePoint GPSEC Security Forum: October 29, Philadelphia, PA

We’re closing out October at the GuidePoint GPSEC Security Forum in Philadelphia. This annual event brings together security professionals, technology partners, and thought leaders for a full day of collaboration and learning.

Hosted at Convene at Commerce Square, the forum will run from 8:00 a.m. to 5:00 p.m. ET and features a rich agenda, including:

‍

• A keynote from a leading cybersecurity expert
  
• Breakout sessions exploring today’s most pressing security challenges
  
• A panel of CISOs sharing practical strategies and real-world insights
  
• A showcase of more than 70 technology vendors driving innovation in security
  
  

The day wraps up with a networking reception, providing attendees with the opportunity to connect with peers, exchange ideas, and continue important conversations in a more relaxed setting. Sentra is proud to participate in this event and contribute to the dialogue on securing sensitive data in an increasingly complex landscape.

Why These Events Matter

Cybersecurity is a team sport. By joining these events, Sentra isn’t just sharing our vision for protecting sensitive data, we’re also listening, learning, and collaborating with the community to address the most pressing challenges in cloud security.

‍

From data discovery and classification to continuous monitoring and protection, Sentra helps organizations embrace innovation without compromising on security.

Connect with Sentra This October

Will you be at one of these events? Let’s meet!

‍

Schedule a meeting with Sentra or visit our team at any of the conferences listed above. We’d love to show you how we can help your organization protect sensitive data and move faster with confidence.

‍

See you on the road this October!

<blogcta-big>