Data Classification Sensitive Info Type Creation Procedure

This admin procedure will provide background information on how to create a new sensitive information type that will be enforced through security and compliance policies.

This article is intended for employees of organizations that use Sittadel's security. Additionally, there are some actions that can only be accomplished by those with administrative privileges.

Sensitive Information Types

Sensitive info types (SITs) are pattern-based data classifiers, Microsoft has 300+ built-in sensitive info types at your disposal. Sensitive information types are used to help identify sensitive items so that you can prevent them from being inadvertently or inappropriately shared. They are also used to help in locating relevant data in eDiscovery, and to apply governance actions to certain types of information.

 

Procedure Scope: Administrators

Required Group Membership: Admin.DataLossPrevention

 

Creating a Sensitive Info Type Data Classifier

  1. Navigate to Sensitive Info Types - Purview, select Create Sensitive Info Type.
  2. A redirection will occur, start the creation process by providing basic information like name and description of the rule. Select Next to continue.
  3. Next select Create Pattern to define the rule your policy will utilize to detect sensitive information. Provide the pattern with a confidence level, primary element, and any other additional information that will improve accuracy. Select Create to generate the rule, select Next to proceed.
  4. The confidence level will be restated in the next step, additionally a reiteration of providing additional supporting elements to help reduce the likelihood of false positives. Select Next to finalize the creation process.
  5. A final review will be displayed showing all the configured items, if a discrepancy is detected select the Edit button next to the corresponding section to make the proper adjustments. Once everything is finalized, select Create to publish the new rule.
  6. A prompt will be displayed showing the successful creation of the rule. Select Done to finalize the rule.

You're Finished!

You should have successfully created a new sensitive information type that will be enforced through other policies to determine possible data exfiltration or targeted attacks. For any other problems or questions, reach out to us!