Data Classification

data_classification

The Data Classification object includes information about data classification levels and data category types.

Contents

Attributes

Caption Name Type Is Array Default Description
Category category String The name of the data classification category that data matched into, e.g. Financial, Personal, Governmental, etc.
Category ID category_id Integer The normalized identifier of the data classification category.
0
Unknown
1
Personal
2
Governmental
3
Financial
4
Business
5
Military and Law Enforcement
6
Security
99
Other
Confidentiality confidentiality String The file content confidentiality, normalized to the confidentiality_id value. In the case of 'Other', it is defined by the event source.
Confidentiality ID confidentiality_id Integer The normalized identifier of the file content confidentiality indicator.
0
Unknown
1
Not Confidential
2
Confidential
3
Secret
4
Top Secret
5
Private
6
Restricted
99
Other
Policy policy Policy Details about the data policy that governs data handling and security measures related to classification.
Raw Data raw_data JSON The event data as received from the event source.
Record ID record_id String Unique identifier for the object
Unmapped Data unmapped Unmapped The attributes that are not mapped to the event schema. The names and values of those attributes are specific to the event source.

Context

Data Classification

JSON

            
{
  "caption": "Data Classification",
  "description": "The Data Classification object includes information about data classification levels and data category types.",
  "extends": "object",
  "name": "data_classification",
  "attributes": {
    "category": {
      "description": "The name of the data classification category that data matched into, e.g. Financial, Personal, Governmental, etc.",
      "requirement": "optional",
      "caption": "Category",
      "type": "string_t"
    },
    "category_id": {
      "description": "The normalized identifier of the data classification category.",
      "enum": {
        "0": {
          "caption": "Unknown",
          "description": "The type is not mapped. See the <code>data_type</code> attribute, which contains a data source specific value."
        },
        "1": {
          "caption": "Personal",
          "description": "Any Personally Identifiable Information (PII), Electronic Personal Health Information (ePHI), or similarly personal information. E.g., full name, home address, date of birth, etc."
        },
        "2": {
          "caption": "Governmental",
          "description": "Any sensitive government identification number related to a person or other classified material. E.g., Passport numbers, driver license numbers, business identification, taxation identifiers, etc."
        },
        "3": {
          "caption": "Financial",
          "description": "Any financially-related sensitive information or Cardholder Data (CHD). E.g., banking account numbers, credit card numbers, International Banking Account Numbers (IBAN), SWIFT codes, etc."
        },
        "4": {
          "caption": "Business",
          "description": "Any business-specific sensitive data such as intellectual property, trademarks, copyrights, human resource data, Board of Directors meeting minutes, and similar."
        },
        "5": {
          "caption": "Military and Law Enforcement",
          "description": "Any mission-specific sensitive data for military, law enforcement, or other government agencies such as specifically classified data, weapon systems information, or other planning data."
        },
        "6": {
          "caption": "Security",
          "description": "Any sensitive security-related data such as passwords, passkeys, IP addresses, API keys, credentials and similar secrets. E.g., AWS Access Secret Key, SaaS API Keys, user passwords, database credentials, etc."
        },
        "99": {
          "caption": "Other",
          "description": "Any other type of data classification or a multi-variate classification made up of several other classification categories."
        }
      },
      "requirement": "recommended",
      "caption": "Category ID",
      "sibling": "category",
      "type": "integer_t"
    },
    "confidentiality": {
      "requirement": "optional",
      "caption": "Confidentiality",
      "description": "The file content confidentiality, normalized to the confidentiality_id value. In the case of 'Other', it is defined by the event source.",
      "type": "string_t"
    },
    "confidentiality_id": {
      "requirement": "recommended",
      "caption": "Confidentiality ID",
      "description": "The normalized identifier of the file content confidentiality indicator.",
      "enum": {
        "99": {
          "caption": "Other",
          "description": "The confidentiality is not mapped. See the <code>confidentiality</code> attribute, which contains a data source specific value."
        },
        "0": {
          "caption": "Unknown",
          "description": "The confidentiality is unknown."
        },
        "1": {
          "caption": "Not Confidential"
        },
        "2": {
          "caption": "Confidential"
        },
        "3": {
          "caption": "Secret"
        },
        "4": {
          "caption": "Top Secret"
        },
        "5": {
          "caption": "Private"
        },
        "6": {
          "caption": "Restricted"
        }
      },
      "sibling": "confidentiality",
      "type": "integer_t"
    },
    "policy": {
      "description": "Details about the data policy that governs data handling and security measures related to classification.",
      "requirement": "optional",
      "caption": "Policy",
      "type": "policy"
    },
    "raw_data": {
      "group": "context",
      "caption": "Raw Data",
      "description": "The event data as received from the event source.",
      "type": "json_t"
    },
    "record_id": {
      "description": "Unique identifier for the object",
      "group": "primary",
      "requirement": "required",
      "caption": "Record ID",
      "type": "string_t"
    },
    "unmapped": {
      "caption": "Unmapped Data",
      "description": "The attributes that are not mapped to the event schema. The names and values of those attributes are specific to the event source.",
      "type": "unmapped",
      "is_array": true
    }
  },
  "constraints": {
    "at_least_one": [
      "category_id",
      "confidentiality_id"
    ]
  }
}