Finding sensitive data

Once a data model has been created on BizDataXPortal, using BizDataX Portal discoverers, depending on the database analyzers, one can find places where sensitive data may be located.

Finding sensitive data is performed on BizDataX Portal and consists of two essential parts:

  • Discovery rules
  • Discovery findings
Table of contents
Discovery rules
Discovery findings

Discovery rules

The discovery rules are used to define what kind of data should discoverers search for during sensitive data discovery.

To start defining the discovery rules, open the project's dashboard, on the Discovery rules panel, click the gear button.

Manage discovery rules

To create a discovery rule, click the plus button in the upper-right corner.

New discovery rule

Enter the Name and select the First name as a discoverer. Selected discoverer finds data matching any first name in the lookup list. Define a discovery scope by selecting the previously created data source and environment, and save.

Create discovery rule

Run the sensitive data discovery by selecting an option on the right.

Run discovery

Monitor the execution of the process on the screen that is opened. The sensitive data discovery process found 7 sensitive data candidates. The next chapter includes analysis of the results found and manual determination of whether a particular sensitive data is really sensitive or not.

Discovery process

Discovery findings

The discovery findings represent sensitive data candidates that can be manually marked as sensitive or not sensitive data.

To see discovery findings, open the project's dashboard, on the Discovery findings panel, click the gear button.

Manage discovery findings

To start working with discovery findings enable Edit mode in the upper-right corner.

Discovery findings list

Mark individual findings as sensitive or not sensitive after reviewing more details about each individual finding: scope, sample data values, and their frequency, and other displayed data. Currently, the scope is sufficient to conclude that sensitive data are the first and third finding so that only they need to be marked.

Edit discovery findings

Having at least one finding marker as sensitive is a precondition for creating a specification.