Data Classification
data_classification
The Data Classification object includes information about data classification levels and data category types.
Contents
Attributes
Caption | Name | Type | Is Array | Default | Description |
---|---|---|---|---|---|
Category | category | String | The name of the data classification category that data matched into, e.g. Financial, Personal, Governmental, etc. | ||
Category ID | category_id | Integer |
The normalized identifier of the data classification category.
|
||
Confidentiality | confidentiality | String | The file content confidentiality, normalized to the confidentiality_id value. In the case of 'Other', it is defined by the event source. | ||
Confidentiality ID | confidentiality_id | Integer |
The normalized identifier of the file content confidentiality indicator.
|
||
Policy | policy | Policy | Details about the data policy that governs data handling and security measures related to classification. | ||
Raw Data | raw_data | JSON | The event data as received from the event source. | ||
Record ID | record_id | String | Unique identifier for the object | ||
Unmapped Data | unmapped | Unmapped | The attributes that are not mapped to the event schema. The names and values of those attributes are specific to the event source. |
Context
JSON
{
"caption": "Data Classification",
"description": "The Data Classification object includes information about data classification levels and data category types.",
"extends": "object",
"name": "data_classification",
"attributes": {
"category": {
"description": "The name of the data classification category that data matched into, e.g. Financial, Personal, Governmental, etc.",
"requirement": "optional",
"caption": "Category",
"type": "string_t"
},
"category_id": {
"description": "The normalized identifier of the data classification category.",
"enum": {
"0": {
"caption": "Unknown",
"description": "The type is not mapped. See the <code>data_type</code> attribute, which contains a data source specific value."
},
"1": {
"caption": "Personal",
"description": "Any Personally Identifiable Information (PII), Electronic Personal Health Information (ePHI), or similarly personal information. E.g., full name, home address, date of birth, etc."
},
"2": {
"caption": "Governmental",
"description": "Any sensitive government identification number related to a person or other classified material. E.g., Passport numbers, driver license numbers, business identification, taxation identifiers, etc."
},
"3": {
"caption": "Financial",
"description": "Any financially-related sensitive information or Cardholder Data (CHD). E.g., banking account numbers, credit card numbers, International Banking Account Numbers (IBAN), SWIFT codes, etc."
},
"4": {
"caption": "Business",
"description": "Any business-specific sensitive data such as intellectual property, trademarks, copyrights, human resource data, Board of Directors meeting minutes, and similar."
},
"5": {
"caption": "Military and Law Enforcement",
"description": "Any mission-specific sensitive data for military, law enforcement, or other government agencies such as specifically classified data, weapon systems information, or other planning data."
},
"6": {
"caption": "Security",
"description": "Any sensitive security-related data such as passwords, passkeys, IP addresses, API keys, credentials and similar secrets. E.g., AWS Access Secret Key, SaaS API Keys, user passwords, database credentials, etc."
},
"99": {
"caption": "Other",
"description": "Any other type of data classification or a multi-variate classification made up of several other classification categories."
}
},
"requirement": "recommended",
"caption": "Category ID",
"sibling": "category",
"type": "integer_t"
},
"confidentiality": {
"requirement": "optional",
"caption": "Confidentiality",
"description": "The file content confidentiality, normalized to the confidentiality_id value. In the case of 'Other', it is defined by the event source.",
"type": "string_t"
},
"confidentiality_id": {
"requirement": "recommended",
"caption": "Confidentiality ID",
"description": "The normalized identifier of the file content confidentiality indicator.",
"sibling": "confidentiality",
"type": "integer_t",
"enum": {
"0": {
"caption": "Unknown",
"description": "The confidentiality is unknown."
},
"1": {
"caption": "Not Confidential"
},
"2": {
"caption": "Confidential"
},
"3": {
"caption": "Secret"
},
"4": {
"caption": "Top Secret"
},
"5": {
"caption": "Private"
},
"6": {
"caption": "Restricted"
},
"99": {
"caption": "Other",
"description": "The confidentiality is not mapped. See the <code>confidentiality</code> attribute, which contains a data source specific value."
}
}
},
"policy": {
"description": "Details about the data policy that governs data handling and security measures related to classification.",
"requirement": "optional",
"caption": "Policy",
"type": "policy"
},
"raw_data": {
"group": "context",
"caption": "Raw Data",
"description": "The event data as received from the event source.",
"type": "json_t"
},
"record_id": {
"description": "Unique identifier for the object",
"group": "primary",
"requirement": "required",
"caption": "Record ID",
"type": "string_t"
},
"unmapped": {
"caption": "Unmapped Data",
"description": "The attributes that are not mapped to the event schema. The names and values of those attributes are specific to the event source.",
"type": "unmapped",
"is_array": true
}
},
"constraints": {
"at_least_one": [
"category_id",
"confidentiality_id"
]
}
}