Data Pattern Configuration

Description

Data pattern utilizes Data Analysis policies (DLP Policies) to target the specific type of data within the cloud storage accounts. The benefit of being able to configure data pattern in Compliance policies is only the targeted data pattern is scope thus eliminate false positives. For more information, please see Data Analysis for more info.

Example

GDPR - Personal Data Discovery

Description

GDPR - Personal Data Discovery policy identifies what personal data the company has and where it resides. You can configure what type of data is considered as personal data and the cloud storage file path. Compliance report will gather and display info on targeted personal data.

Policy Configuration

Follow the steps below to enable and configure the policy

1. Click on any Cloud Account drop down menu from FortiCASB dashboard, e.g. Salesforce, Office365, etc.
2. Click on Policy drop down menu and select Compliance, then select GDPR tab.
3. Locate GDPR - Personal Data Discovery and click on the right arrow key > button to expand the policy.
4. Click on General tab, click Status toggle switch button to enable the policy.



5. Click on Severity level drop down menu to select the severity level (Critical, Alert, Warning, Information).

Note: this policy only generates data in Compliance Report.

6. Click Context tab to configure settings.



7. In File Path Regex, enter a valid Regex of the target file path to be monitored.
8. In Data Patterns, click on the field and select the data patterns (financial, personal identity information, etc.) to be monitored.
9. Click Save to upgrade the configuration.

After the policy is enabled and configured, Compliance report will display records of files that are considered to be personal data that is residing at the targeted file path. For more details, please see Compliance Report.