DocsICP FilingConsole
官方文档
首页

Manage sensitive data identification rules

更新时间：
复制 MD 格式
产品详情
我的收藏

The sensitive data protection feature provides dozens of built-in sensitive data identification rules. These rules help you comply with laws and regulations such as the Cybersecurity Law of the People's Republic of China, GDPR, the Sarbanes-Oxley (SOX) Act, PCI DSS, and HIPAA, with a focus on protecting personal information. If the built-in rules do not meet your business needs, you can create custom sensitive data identification rules.

Prerequisites

You must be an administrator, a database administrator (DBA), or a security administrator.
Note Hover over your profile picture 头像 in the upper-right corner to view your user role.

Procedure

  1. Log in to the DMS 5.0 console.
  2. In the top navigation bar, choose security and specifications > sensitive data management > sensitive data identification.
  3. Click the identification rule tab.
  4. Click Create Rule.
  5. In the Create Identification Rule panel, configure the rule and then click Submit.
    Parameter Description
    rule name Enter a name for the new rule.
    Note The rule name cannot be changed after submission.
    rule description Enter a description for the rule.
    data type Select the type of data that the rule will identify.
    Note You can also manually add a new data classification.
    sensitivity level Set the target sensitivity level for fields identified by the rule. For more information, see Field Sensitivity Levels.
    • Low sensitivity: Corresponds to the original Internal classification in DMS. By default, the system assigns the low sensitivity level to data in secure collaboration mode.
    • Moderate sensitivity: Corresponds to the original Sensitive classification in DMS.
    • High sensitivity: Corresponds to the original Confidential classification in DMS.
    rule configuration
    • Metadata scan.
      • Contain: If a field name contains the specified characters, the rule assigns the target sensitivity level to the field.
      • Exclude: If a field name contains the specified characters, the rule does not assign the target sensitivity level to the field.
      Note To specify multiple strings, separate them with a comma (,).
    • Data content scan. Enter a regular expression to match data content.
      Note You can enter test data and click Test to verify that your regular expression works as expected.
      • Match successful: The system assigns the target sensitivity level to the test data.
      • Match failed: The system does not assign the target sensitivity level to the test data.
    For example, to classify the field named name and data containing the letters A, B, or C as moderate sensitivity, use the following settings. Set data type to "Other">"Product". In rule configuration, select metadata scan and set the match condition for the field name to "Contain" name. Then, select data content scan and set the regular expression for the field content to [ABC]. In the test data field, enter Apple, and then click Test. The result shows "Match successful".
  6. Enable the new rule.
    Note
    • New rules are disabled by default and take effect only after you enable them.
    • Changes to a rule's status take effect in the next scan task.
    • For a built-in identification rule, you can modify its rule description, data type, and sensitivity level. However, you cannot edit its rule configuration, that is, the identification algorithm.