Chat now with support
Chat with Support

Classification Module 6.1.3 - User Guide

Introduction Deploying Classification in Identity Manager Configuring Classification: Taxonomies, Categories, and Rules
An Overview of Classification Configuration Steps Required to Implement Classification Creating Taxonomies Implementing Rules for Automated Categorization Classifying Resources When Do Categorization and Classification Occur? Managing the Life Cycle of Taxonomies and Categories
Working with Categorized Resources Appendix A: PowerShell Commands Appendix B: Oracle Configuration Appendix C: Classifying Data with Data Governance Templates Appendix D: Creating a Taxonomy to Classify Data

Review the Classification Service

If your classification service is not functioning properly, you can use the Get-QServiceInfo command to troubleshoot the issue. You can use this command to:

  • Ensure that the version of the classification server matches the version the Data Governance server expects. If the versions do not match, the system will not work properly.
  • Get information about the account used by the classification service.
  • Get information about the identity used to communicate with the DGE server. Use this to ensure the expected user is accessing the classification service.
  • Determine of the services required for classification are running (FileHandler and SharePoint handler)

Configuring Classification: Taxonomies, Categories, and Rules

An Overview of Classification Configuration

Categorization is intended to provide information about your data that can help you better understand the state of your environment, and secure information based on an understanding of a resource’s content. The end result of classification is a relationship between a resource and a particular category. In order for categorization to have value in your organization, the category must tell you something specific about the resource, and you must have confidence that system is applying these categories accurately.

By working with the components of the classification system, and using a combination of automatically and manually applied categories, you can refine the system. The following outlines the components of the system and other necessary concepts:

Components of the Classification System
Component Description
Resource The NTFS or SharePoint object that is being categorized.
Taxonomy A hierarchical group of categories. For more information, see Working with Taxonomies.
Category A well-defined division in the classification system. By associating rules with the category, it can be determined if a given resource belongs to that category. For more information, see How Rules Affect Categorization.
Rule A rule sets the criteria for categorization. More than one rule can be assigned to a category. For more information, see Implementing Rules for Automated Categorization.
Rule Engine Processes a resources extracted text and identifies all relevant entities (such as names, addresses and so on), runs all rules to determine rule matches, and where appropriate, assigns a category to the resource.
Categorization A relationship between a resource and a category. This relationship can be created manually, or as a result of passing the rules associated with the category.
Classification A special kind of categorization, based on the risk of the assigned categories.

Steps Required to Implement Classification

Proper deployment of your classification system requires the coordination of the administrator responsible for managing the data that is scanned or monitored, the classification analyst responsible for managing the taxonomies in the system, the business owners responsible for verifying and managing the categorization of resources, and the security or compliance officer responsible for oversight. You should also consider how you plan to make changes over time. See Managing the Life Cycle of Taxonomies and Categories.

The following steps are required before you set up classification:

  1. Activate classification in your deployment. For details, see Activating Classification .
  2. Set up scanning and change watching for classification on your servers. For details, see Enable and Disable Automatic Classification on Specific Managed Hosts.

Automatic Categorization

The following steps are required for categorization:

  1. Gather categorization and classification requirements.
  2. Plan the required taxonomy and categories structure to meet your requirements.
  3. Plan the text extractor patterns and rules. For details, see Implementing Rules for Automated Categorization.
  4. Create the text extractors that will be used to match a resource’s text. (For example, find a letter combination based on a regular expression). For details, see Working with Text Extractors.
  5. Create and enable rules to define the categorization criteria. (For example, two text extractors should be found within 200 characters of each other.) For details, see Managing Rules in the Classification System.
  6. Create and configure the required taxonomy. For details, see Working with Taxonomies.
  7. Create and configure the required categories. For details, see Working with Categories.
  8. Associate the required rules with each category. For details, see Associating Rules to Categories and Applying Rule Weights
  9. Test the rules and categories to ensure they accomplish the desired results. For details, see Testing and Reviewing Automated Classification.
  10. Make categories available for automated categorization. For details, see Making a Category Available to the Classification System.
  11. Test the classification system to ensure the desired results are achieved.

For an example walkthrough, see Appendix D: Creating a Taxonomy to Classify Data.

Manual Categorization

Manual categorization requires very little set up, however it is not as powerful as automated categorization. Using manual categorization, business owners can apply categories to owned resources. Policies and attestations can be implemented, and information about categorization may appear in relevant view, reports and dashboards. For more information on manually categorizing resources, see Working With Manually Categorized Resources.

The following steps are required for categorization:

  1. Gather categorization and classification requirements.
  2. Plan the required taxonomy and categories structure to meet your requirements.
  3. Create and configure the required taxonomy. For details, see Working with Taxonomies.
  4. Create the required categories. For details, see Working with Categories
  5. Make the taxonomy available for manual categorization by publishing the taxonomy tree.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating