Appendix C: Classifying Data with Data Governance Templates
Contents
Available Templates
Identity Manager includes taxonomy templates to help you to understand the classification components and process. These templates must be imported into your deployment. For details, see Importing and Replacing Taxonomies.
The following taxonomies contain categories, rules, and text extractors that can be used for classification:
- Data Governance Sample Taxonomy
This template includes standard categories that are used within compliance frameworks. For details, see Data Governance Sample Taxonomy. - Data Governance Payment Card Industry (PCI) Sample Taxonomy
This template includes two categories (low and medium) that correspond to the level of data sensitivity based on matches to typical PCI data. For details, see Data Governance Payment Card Industry (PCI) Taxonomy. - Titus Commercial Taxonomy
This template includes categories that map directly to those used within the Titus Classification system. For details, see Titus Commercial Taxonomy.To enable the sample taxonomies to categorize and ultimately classify your data, the Classification Analyst needs to set the required properties through the Categorization Manager. For details see, Working with Categories.
Text Extractors
Automatic categorization by the system in part depends upon the strength of matches of its content as measured against predefined content. The specific content extracted from a resource to include in the comparison is determined through text extractors. The Data Governance Extractor template includes a variety of extractors out of the box that are imported into the system for use within rules. For details, see Sample Advanced Text Extractors Details.
We suggest you use these sample taxonomies and the associated rules and extractors in a non-production environment to test the classification system with your data and make adjustments where required before implementing in your live environment. For details, see Testing and Reviewing Automated Classification and Working with Categorized Resources.
Working with the Sample Taxonomy Templates
Contents
Before using the templates ensure that you have all the necessary components in your environment in place. For details see, Steps Required to Implement Classification.
 |
To use the sample templates for classification, the data must be located on a scanned data root that is set for classification on a managed host. For details, see Enabling Categorization on Folders (Security Index Roots). |
| |
The classification assigned by Identity Manager (Public, Internal, Private, or Secret) depends upon the risk calculated from the applied categories. For details see, Classifying Resources. |
Data Governance Sample Taxonomy
The Data Governance Sample taxonomy demonstrates a taxonomy based on basic personal information. This includes credit card and bank account numbers, National Identifiers, phone numbers, addresses, email addresses, and much more.
By default, the taxonomy will import with the following settings:
- Enabled for automatic classification based upon the template’s rules and extractors. If you would like to alter how the categories are applied, you can edit these variables. For details see, Working with Text Extractors.
- Mutually exclusive has not been enabled, so more than one category can be assigned from the taxonomy. If enabled, and more than one category could be applied to a resource based on the associated rules and category threshold, only the category with the highest combined rule score is applied. For details on how this will affect your classifications, see Working with Categories.
- A rule weights of 1.0. For details on how rules affect the categorization, see How Rules Affect Categorization.
Understanding the Taxonomy
If you apply the template with all defaults, which includes the categories, text extractors, and rules your data will be categorized as follows:
| |
A category will be applied, based on the rule specified for the category. This takes into account the weight, strength, and threshold. The classification assigned by Identity Manager (Public, Internal, Private, or Secret) depend upon the risk calculated from the applied categories. For details see, Classifying Resources. |
| Category | data MAtches that Cause Categorization |
| Credit Card Number | Delimited and non-delimited values within 50 characters of the name of a major credit card provider. |
| National Identifier for United States, Great Britain, Canada, France, and Spain | Delimited and non-delimited National Identity Card numbers and card names for Great Britain, Canada, United States, France and Spain. (Social Insurance Number, SIN, Social Security Number, SSN, National Insurance, NI, numéro d'assurance sociale, nas, medicare, or 'INSEE' or the fully spelled out version.) |
| Online Email Address | Email addresses |
| International Bank Account Number (IBAN | Delimited and non-delimited IBAN numbers within 50 characters to an IBAN name. |
| Phone Number for United States, Great Britain, Canada, France, and Spain | Delimited and non-delimited phone numbers for the United States, Great Britain, Canada, France, and Spain within 200 characters of a word giving this number context (such as Tel, Phone, and Telephone). |
| Address | Addresses for United States, Canada, Germany, France, Great Britain, and Spain. |
| Name | Female and male first and last name, salutations, and suffix for United States, Canada, Germany, France, Great Britain, and Spain. |