Discovery findings represent sensitive data candidates discovered using discovery rules which can be then checked and manually marked as sensitive or not sensitive data. This process requires an executed discovery to have data to check and mark.
|Discovery Findings Overview List|
|Expand Sample Data|
|Needs Review or Does not need Review|
|Mark Finding as Miss|
|Mark Finding as Hit|
If there are no discovery findings, the Discovery Findings Overview List is empty. The discovery findings are the result of the executed discoveries.
Figure 1: Discovery Findings Overview List
The default mode to display the discovery findings is the View mode. The mode can be controlled with the yellow Edit mode button in the upper right corner (Edit mode / View mode).
In View mode, the following options are available for each record:
Figure 2: Discovery finding expanded
Clicking the filter button in the upper right corner of the screen opens the possibility of filtering the displayed data.
Figure 3: Advanced options
As a result of expanding one record, additional data will be shown:
Figure 4: Expand Sample Data
This option will mark Finding that it needs Review or not.
This option will mark Finding as 'Miss'.
This option will mark Finding as 'Hit'.
This option will mark Finding as 'Unknown'.
There is possibility to enter some note for selected finding.
Figure 5: Edit Note
If Discovery Finding is no needed user can select on Discovery Finding overview list one or more Findings, by using checkboxes, to Delete it. A confirmation message appears before deleting.
Figure 6: Delete Finding
Reporting functionality offers a way to download and manipulate data from Portal in order to produce meaningful reports. Sensitive data discovery finding reports will consist of scope, column record count, finding status, the name of the rule, discoverer and discoverer value used during discovery process, hit rate, evaluated sample size, number of findings, number of null values, information on whether the finding was found inside column data or metadata, information on whether finding should be further reviewed and note.
In addition, reports come in two main types: static files and files with live data feeds.
Figure 7: Reporting - export findings
Files with live data feeds will automatically refresh each time a file is opened, but can also be manually refreshed using Excel. A set of pre-defined reports can be downloaded here. However, custom reports can also be defined using this step-by-step guide: