How to create a Data Rule to identify sensitive data?

Data Rules are criteria/set of criteria that could spot sensitivity in data and defining a rule that classifies data as sensitive is the foremost step in achieving data security.

Data Rules are a gateway to adhere to compliance standards like HIPAA, PCI DSS, and GDPR using predefined criteria that encompass relevant criteria. You can also create your organization-specific Data Rule by leveraging custom criteria per your organizations' requirements.

Creation of Data Rules

The Data rules are created by following the steps explained below:

Step 1: On the product console, navigate to the Data Classification section in the Policies tab and select New Data Rules.

Step 2: Enter a name for the Data Rule and provide a description.

Step 3: Create a Data Rule using predefined criteria. The predefined criteria are listed under the field All, and can be searched in the field next to it.For more information about the predefined criteria, kindly refer below.

Step 4: Once appropriate criteria are selected, Save the Data Rule to associate with a policy.

Note: While searching, avoid searching criteria as initialism (like IBAN, HIPAA), but as complete words. Eg., PII won't give out any results, as Personal Identification Information lists the criteria tagged in this category.

Predefined Criteria

The predefined criteria helps in classifying the sensitive data with ease and achieve the data compliance standards. For more information on how to use the data rules to meet compliance standards, kindly refer here. The various predefined criteria to create the data rules are as follows:

• A country-wise filter can also be selected, listing criteria that are specific only to the relevant/apposite countries for a refined search.
• Custom Rule: Select the Create Custom Rule option and choose from Regex patterns, Keyword Matching, Document Matching, and File Extensions.
  1. In the Regex patterns, enter the Rule Name, Regex Patterns, and the Number of times the Regex pattern occurs.

     Note: More than one Regex pattern can be included by adding the entries.

  2. In the Keyword Matching, enter the Rule Name, CSV/TXT file to be uploaded, and Minimum Word Match Count.
  3. In the Document Matching, enter the Rule Name, DOC/DOCX/PDF/TXT file to be uploaded, and Match Percentage.
  4. In the File Extensions, enter the Rule Name, and Add extensions.