Abstract: Aspects of the invention include receiving a data erasure request associated with a user and identifying, based at least in part on the data erasure request, an entity associated with the user and one or more identifiers for the user. Aspects also include identifying, based at least in part on the one or more identifiers for the user, a cohort that includes the user and comparing the one or more identifiers for the user to identifiers of a plurality of users that are not members of the cohort. Aspects further include identifying a replacement user from the plurality of users based on the comparison and replacing the entity associated with the user in the cohort with an entity associated with the replacement user.

Abstract: Managing data in a distributed computing environment, such as a cloud computing platform for healthcare. The platform selects a set of hierarchical resources deployed in the distributed computing environment, wherein the set of hierarchical resources comprises a resource member. The platform converts the set of selected hierarchical resources to a localized schema. The platform determines a score for the resource member based on the proximity of the resource member to the healthcare privacy dictionary, wherein the proximity is determined using the localized schema. The platform updates the set of hierarchical resources based on the determined score. The platform controls access to a resource member based on the score determined based on a proximity of a localized schema representation of the resource member to a healthcare privacy dictionary.

Abstract: Managing data in a distributed computing environment, such as a cloud computing platform for healthcare. The platform selects a set of hierarchical resources deployed in the distributed computing environment, wherein the set of hierarchical resources comprises a resource member. The platform converts the set of selected hierarchical resources to a localized schema. The platform determines a score for the resource member based on the proximity of the resource member to the healthcare privacy dictionary, wherein the proximity is determined using the localized schema. The platform updates the set of hierarchical resources based on the determined score. The platform controls access to a resource member based on the score determined based on a proximity of a localized schema representation of the resource member to a healthcare privacy dictionary.

Abstract: A system determines a shape of incoming data, and determines, based on the shape, whether the data should be passed on to support answering a query. If the shape of the data suggests that the data is insufficient or may even be misleading, the system can gate the data or prompt for more.

Abstract: Software application data management. A data stream generated via a software application is received. A user profile is determined for a developer of the software application. One or more complications in a data model of the software application are predicted. Data of the data stream received is managed based on the one or more complications in the data model.

Abstract: Dynamically moderating healthcare application data. Receive an incoming data load request comprising a plurality of referential data elements and assess a downstream query impact of the plurality of referential data elements. Determine, based on the assessing, a sensitivity level of the plurality of referentoial data elements, and alter, based on the sensitivity level, compilation of insights generated using the plurality of referential data elements and compilation of a plurality of referenced data elements.

Abstract: Software application data management. A data stream generated via a software application is received. A user profile is determined for a developer of the software application. One or more complications in a data model of the software application are predicted. Data of the data stream received is managed based on the one or more complications in the data model.

Abstract: Aspects of the invention include receiving a data erasure request associated with a user and identifying, based at least in part on the data erasure request, an entity associated with the user and one or more identifiers for the user. Aspects also include identifying, based at least in part on the one or more identifiers for the user, a cohort that includes the user and comparing the one or more identifiers for the user to identifiers of a plurality of users that are not members of the cohort. Aspects further include identifying a replacement user from the plurality of users based on the comparison and replacing the entity associated with the user in the cohort with an entity associated with the replacement user.

Abstract: Aspects of the invention include receiving, by a processor, medical data associated with a patient, populating a patient ontology for the patient with the medical data, determining a completeness the patient ontology for the patient based at least in part on the medical data, querying an upstream data source based on the completeness of the patient ontology, updating the patient ontology based on a query response from the upstream data source, analyzing the updated patient ontology to determine an insight for the patient, and enacting an action based on the insight for the patient.

Abstract: Examples described herein provide a computer-implemented method that includes scanning, by a processing device, a code dependency list and a hierarchy of a core code component. The method further includes pulling, by the processing device, data of the core code using the scanned code dependency list. The method further includes extracting, by the processing device, information from the data for each dependency. The method further includes scoring, by the processing device, the information between versions to detect a likelihood of user data posture changes. The method further includes enforcing, by the processing device, a compensating control for the core code.

Abstract: A system determines a shape of incoming data, and determines, based on the shape, whether the data should be passed on to support answering a query. If the shape of the data suggests that the data is insufficient or may even be misleading, the system can gate the data or prompt for more.

Abstract: Maintaining system security by receiving metadata associated with at least a part of one data file from a metadata storage unit, generating a priority for the at least a part of one data file according to the metadata, and conducting a scan of the part of the data file. The metadata includes one or more virus indicators.

Abstract: A method for prioritizing data for processing based on a prioritization derived from responses to computer-generated surveys is provided. The method may include detecting and extracting time sensitive attributes associated with structured and unstructured data, wherein the time sensitive attributes comprise data elements. The method may further include generating a survey based on the extracted time sensitive attributes and presenting the computer-generated survey for determining a priority level for the extracted time sensitive attributes. The method may further include generating a prioritization database table and the prioritization rules to govern priority for the time sensitive attributes by aggregating feedback received in response to the computer-generated survey. The method may also include processing and prioritizing incoming data messages comprising data elements that are associated with the time sensitive attributes based on the generated prioritization database table and the prioritization rules.

Abstract: Managing data in a distributed computing environment, such as a cloud computing platform for healthcare. The platform selects a set of hierarchical resources deployed in the distributed computing environment, wherein the set of hierarchical resources comprises a resource member. The platform converts the set of selected hierarchical resources to a localized schema. The platform determines a score for the resource member based on the proximity of the resource member to the healthcare privacy dictionary, wherein the proximity is determined using the localized schema. The platform updates the set of hierarchical resources based on the determined score. The platform controls access to a resource member based on the score determined based on a proximity of a localized schema representation of the resource member to a healthcare privacy dictionary.

Abstract: Provided are a computer program product, system, and method for providing access to data storage services in a network environment. Multi-tenancy information for each of a plurality of clients has at least one tenant assigned to the client, at least one data source assigned to the tenant assigned to the client, and for each of the at least one data source, information on at least one user assigned to the data source and permitted access to the data source. A user is provided an isolate tag comprising a client tag identifying one client, a tenant tag identifying one tenant, and a data source tag identifying one data source to which the user is permitted to access data. A user access request with an isolate tag is processed in response to determining that the multi-tenancy information indicates that the client, tenant, and data source identified by the isolate tag are related.

Abstract: Maintaining system security by receiving metadata associated with at least a part of one data file from a metadata storage unit, generating a priority for the at least a part of one data file according to the metadata, and conducting a scan of the part of the data file. The metadata includes one or more virus indicators.

Abstract: A method, computer system, and a computer program product for SLA management is provided. The method may include collecting metrics from services within a composite service. The method may include determining, by a first smart contract, a first violation occurred between a first pair of services, whereby the first smart contract and the first pair of services are associated with a first private channel within a blockchain network. The method may include determining, by a second smart contract, a second SLA violation occurred between a second pair of services, whereby the second smart contract and the second pair of services are associated with a second private channel. The method may include determining that the first SLA violation and second SLA violation are related and the second SLA violation occurred before the first SLA violation. The method may include identifying a violating service within the second pair of services.

Abstract: Provided are a computer program product, system, and method for providing access to data storage services in a network environment. Multi-tenancy information for each of a plurality of clients has at least one tenant assigned to the client, at least one data source assigned to the tenant assigned to the client, and for each of the at least one data source, information on at least one user assigned to the data source and permitted access to the data source. A user is provided an isolate tag comprising a client tag identifying one client, a tenant tag identifying one tenant, and a data source tag identifying one data source to which the user is permitted to access data. A user access request with an isolate tag is processed in response to determining that the multi-tenancy information indicates that the client, tenant, and data source identified by the isolate tag are related.

Abstract: Provided are a computer program product, system, and method for providing access to data storage services in a network environment. Multi-tenancy information for each of a plurality of clients has at least one tenant assigned to the client, at least one data source assigned to the tenant assigned to the client, and for each of the at least one data source, information on at least one user assigned to the data source and permitted access to the data source. A user is provided an isolate tag comprising a client tag identifying one client, a tenant tag identifying one tenant, and a data source tag identifying one data source to which the user is permitted to access data. A user access request with an isolate tag is processed in response to determining that the multi-tenancy information indicates that the client, tenant, and data source identified by the isolate tag are related.

Abstract: Provided are a computer program product, system, and method for providing access to data storage services in a network environment. Multi-tenancy information for each of a plurality of clients has at least one tenant assigned to the client, at least one data source assigned to the tenant assigned to the client, and for each of the at least one data source, information on at least one user assigned to the data source and permitted access to the data source. A user is provided an isolate tag comprising a client tag identifying one client, a tenant tag identifying one tenant, and a data source tag identifying one data source to which the user is permitted to access data. A user access request with an isolate tag is processed in response to determining that the multi-tenancy information indicates that the client, tenant, and data source identified by the isolate tag are related.