Predefined policy groups
Supported policy groups for bulk policy creation.
The following tables describe the templates that are available for each group and the content inspection patterns and keywords that are prepopulated, if applicable. You can select/deselect templates, patterns, and keywords to tailor any group to your needs.
GDPR compliance
This policy group contains templates to support General Data Protection Regulation (GDPR) compliance. The GDPR's privacy and security standards apply to any organization that collects personal data from customers residing in European Union countries. Use this group to track and protect sensitive customer data from an endpoint across various channels, such as web, email, USB, and more.
| Templates |
Cloud sync folder activity, File uploaded or downloaded using unauthorized command, File uploaded or downloaded using unauthorized command, Sensitive content copied and pasted to desktop application, Sensitive content copied and pasted to website, Sensitive file downloaded, Sensitive file downloaded from personal file share website, Sensitive file opened, Sensitive file opened, Sensitive file transferred over RDP from client to server, Sensitive file transferred over RDP from server to client, Sensitive file transferred to remote destination, Sensitive file uploaded, Sensitive file uploaded to personal file share website, Sensitive file written to USB storage device, Unauthorized email sent, Unauthorized file read from USB storage device |
|---|---|
| Content inspection patterns |
Credit or debit card number, Credit card magnetic stripe data, France health insurance card (Carte Vitale) number, France Value Added Tax (VAT) number, France social security (INSEE) number, France passport number, France driving license (NEPH) number, France tax identification number, Ireland passport number, Ireland Value Added Tax (VAT) number, Ireland Personal Public Service (PPS) number, International Mobile Equipment Identity (IMEI) number, Norway driving license number, Norway national identity number, Norway Value Added Tax (VAT) number, Spain Value Added Tax (VAT) number, Spain Codigo Cuenta Cliente (CCC) or customer account number, Spain Documento Nacional de Identidad (DNI) or driving license number, Spain passport number, Spain social security number, Spain Certificado de Identificacion Fiscal (CIF) number, Spain Numero de Identificacion de Extranjero (NIE), Sweden driving license number, Sweden coordination number, Sweden passport number, Sweden social security number, Sweden Value Added Tax (VAT) number, Switzerland Value Added Tax (VAT) number, UK driving license number, UK National Insurance Number (NINO), UK Unique Tax Reference (UTR), UK Value Added Tax (VAT) number, UK passport number |
GLBA compliance
This policy group contains templates to support Gramm-Leach-Bliley Act (GLBA) compliance. The GLBA's requirements apply to financial institutions in the United States of America and safeguard customer data. Use this group to track and protect sensitive customer data from an endpoint across various channels, such as web, email, USB, and more.
| Templates |
Cloud sync folder activity, File uploaded or downloaded using unauthorized command, File uploaded or downloaded using unauthorized command, Sensitive content copied and pasted to desktop application, Sensitive content copied and pasted to website, Sensitive file downloaded, Sensitive file downloaded from personal file share website, Sensitive file opened, Sensitive file opened, Sensitive file transferred over RDP from client to server, Sensitive file transferred over RDP from server to client, Sensitive file transferred to remote destination, Sensitive file uploaded, Sensitive file uploaded to personal file share website, Sensitive file written to USB storage device, Unauthorized email sent, Unauthorized file read from USB storage device |
|---|---|
| Content inspection patterns |
Credit or debit card number, US Individual Taxpayer Identification Number (ITIN), US Social Security Number (SSN), US Bank Account Number |
HIPAA/HITECH compliance
This policy group contains templates to support Health Insurance Portability and Accountability Act (HIPAA) and Health Information Technology for Economic and Clinical Health Act (HITECH) compliance. HIPAA/HITECH requirements apply to organizations in the United States of America that create, use, and store protected health information. Use this group to track and safeguard protected health information from an endpoint across various channels, such as web, email, USB, and more.
| Templates |
Cloud sync folder activity, File uploaded or downloaded using unauthorized command, File uploaded or downloaded using unauthorized command, Sensitive content copied and pasted to desktop application, Sensitive content copied and pasted to website, Sensitive file downloaded, Sensitive file downloaded from personal file share website, Sensitive file opened, Sensitive file opened, Sensitive file transferred over RDP from client to server, Sensitive file transferred over RDP from server to client, Sensitive file transferred to remote destination, Sensitive file uploaded, Sensitive file uploaded to personal file share website, Sensitive file written to USB storage device, Unauthorized email sent, Unauthorized file read from USB storage device |
|---|---|
| Content inspection patterns |
National Drug Code (NDC) number, US Social Security Number (SSN), Drug Enforcement Agency (DEA) number |
| Content inspection keywords |
HIPAA diseases, HIPAA drugs, HIPAA treatments, ICD-10 codes, ICD-10 names |
ISO/IEC 27001 audit
This policy group contains templates to audit user activity for ISO/IEC 27001 compliance. Use this group to monitor activity on an endpoint that presents information security risk from an endpoint across various channels, such as web, printers, USB, and more.
| Templates |
Cloud sync folder activity, Document printed using physical printer outside office hours, Incoming port scan performed, Large print job completed, New application installed, Outgoing port scan performed, Sensitive file downloaded, Sensitive file downloaded from personal file share website, Sensitive file transferred over RDP from client to server, Sensitive file transferred over RDP from server to client, Sensitive file uploaded, Sensitive file uploaded to personal file share website, Sensitive file written to USB storage device, Unauthorized file read from USB storage device, Unauthorized TCP connection made, Unauthorized USB storage device inserted, Windows security event logs cleared |
|---|
ISO/IEC 27001 enforcement
This policy group contains templates to enforce ISO/IEC 27001 standards. Use this group to monitor activity on an endpoint that presents information security risk from an endpoint across various channels, such as web and USB, and block unauthorized activity.
| Templates |
Sensitive file downloaded from personal file share website, Sensitive file uploaded, Sensitive file uploaded to personal file share website, Unauthorized USB storage device inserted |
|---|
PCI DSS compliance
This policy group contains templates to support Payment Card Industry Data Security Standard (PCI DSS) compliance. The PCI DSS' global security standards apply to all entities that store, process, or transmit sensitive account data. Use this group to track and protect Sensitive Cardholder Data (SCD) and Sensitive Authentication Data (SAD) from an endpoint across various channels, such as web, email, USB, and more.
| Templates |
Cloud sync folder activity, File uploaded or downloaded using unauthorized command, File uploaded or downloaded using unauthorized command, Sensitive content copied and pasted to desktop application, Sensitive content copied and pasted to website, Sensitive file downloaded, Sensitive file downloaded from personal file share website, Sensitive file opened, Sensitive file opened, Sensitive file transferred over RDP from client to server, Sensitive file transferred over RDP from server to client, Sensitive file transferred to remote destination, Sensitive file uploaded, Sensitive file uploaded to personal file share website, Sensitive file written to USB storage device, Unauthorized email sent, Unauthorized file read from USB storage device |
|---|---|
| Content inspection patterns |
Credit or debit card number, Credit card magnetic stripe data |
POPIA compliance
This policy group contains templates to support Protection of Personal Information Act (POPIA) compliance. The POPIA's privacy and security standards apply to any organization that collects personal data from customers residing in South Africa. Use this group to track and protect sensitive customer data from an endpoint across various channels, such as web, email, USB, and more.
| Templates |
Cloud sync folder activity, File uploaded or downloaded using unauthorized command, File uploaded or downloaded using unauthorized command, Sensitive content copied and pasted to desktop application, Sensitive content copied and pasted to website, Sensitive file downloaded, Sensitive file downloaded from personal file share website, Sensitive file opened, Sensitive file opened, Sensitive file transferred over RDP from client to server, Sensitive file transferred over RDP from server to client, Sensitive file transferred to remote destination, Sensitive file uploaded, Sensitive file uploaded to personal file share website, Sensitive file written to USB storage device, Unauthorized email sent, Unauthorized file read from USB storage device |
|---|---|
| Content inspection patterns |
South Africa identity number, Credit or debit card number |
Sweden financial data
This policy group contains templates to detect the presence of sensitive financial information commonly used in Sweden. Use this group to track and protect sensitive data from an endpoint across various channels, such as web, email, USB, and more.
| Templates |
Cloud sync folder activity, File uploaded or downloaded using unauthorized command, File uploaded or downloaded using unauthorized command, Sensitive content copied and pasted to desktop application, Sensitive content copied and pasted to website, Sensitive file downloaded, Sensitive file downloaded from personal file share website, Sensitive file opened, Sensitive file opened, Sensitive file transferred over RDP from client to server, Sensitive file transferred over RDP from server to client, Sensitive file transferred to remote destination, Sensitive file uploaded, Sensitive file uploaded to personal file share website, Sensitive file written to USB storage device, Unauthorized email sent, Unauthorized file read from USB storage device |
|---|---|
| Content inspection patterns |
Sweden International Bank Account Number (IBAN), Sweden social security number |
UK Access to Medical Reports Act compliance
This policy group contains templates to support Access to Medical Reports Act compliance. The Access to Medical Reports Act's requirements apply to organizations in the United Kingdom that create, use, and store protected health information. Use this group to track and safeguard protected health information from an endpoint across various channels, such as web, email, USB, and more.
| Templates |
Cloud sync folder activity, File uploaded or downloaded using unauthorized command, File uploaded or downloaded using unauthorized command, Sensitive content copied and pasted to desktop application, Sensitive content copied and pasted to website, Sensitive file downloaded, Sensitive file downloaded from personal file share website, Sensitive file opened, Sensitive file opened, Sensitive file transferred over RDP from client to server, Sensitive file transferred over RDP from server to client, Sensitive file transferred to remote destination, Sensitive file uploaded, Sensitive file uploaded to personal file share website, Sensitive file written to USB storage device, Unauthorized email sent, Unauthorized file read from USB storage device |
|---|---|
| Content inspection patterns |
UK National Health Service (NHS) number, UK National Insurance Number (NINO) |
UK PII
This policy group contains templates to detect the presence of Personally Identifiable Information (PII) commonly used in the United Kingdom. Use this group to track and protect PII from an endpoint across various channels, such as web, email, USB, and more.
| Templates |
Cloud sync folder activity, File uploaded or downloaded using unauthorized command, File uploaded or downloaded using unauthorized command, Sensitive content copied and pasted to desktop application, Sensitive content copied and pasted to website, Sensitive file downloaded, Sensitive file downloaded from personal file share website, Sensitive file opened, Sensitive file opened, Sensitive file transferred over RDP from client to server, Sensitive file transferred over RDP from server to client, Sensitive file transferred to remote destination, Sensitive file uploaded, Sensitive file uploaded to personal file share website, Sensitive file written to USB storage device, Unauthorized email sent, Unauthorized file read from USB storage device |
|---|---|
| Content inspection patterns |
UK National Insurance Number (NINO), UK passport number |
UK financial data
This policy group contains templates to detect the presence of sensitive financial information commonly used in the United Kingdom. Use this group to track and protect sensitive data from an endpoint across various channels, such as web, email, USB, and more.
| Templates |
Cloud sync folder activity, File uploaded or downloaded using unauthorized command, File uploaded or downloaded using unauthorized command, Sensitive content copied and pasted to desktop application, Sensitive content copied and pasted to website, Sensitive file downloaded, Sensitive file downloaded from personal file share website, Sensitive file opened, Sensitive file opened, Sensitive file transferred over RDP from client to server, Sensitive file transferred over RDP from server to client, Sensitive file transferred to remote destination, Sensitive file uploaded, Sensitive file uploaded to personal file share website, Sensitive file written to USB storage device, Unauthorized email sent, Unauthorized file read from USB storage device |
|---|---|
| Content inspection patterns |
Credit or debit card number, SWIFT Business Identifier Codes (BIC), UK International Bank Account Number (IBAN) |
USA PII
This policy group contains templates to detect the presence of Personally Identifiable Information (PII) commonly used in the United States of America. Use this group to track and protect PII from an endpoint across various channels, such as web, email, USB, and more.
| Templates |
Cloud sync folder activity, File uploaded or downloaded using unauthorized command, File uploaded or downloaded using unauthorized command, Sensitive content copied and pasted to desktop application, Sensitive content copied and pasted to website, Sensitive file downloaded, Sensitive file downloaded from personal file share website, Sensitive file opened, Sensitive file opened, Sensitive file transferred over RDP from client to server, Sensitive file transferred over RDP from server to client, Sensitive file transferred to remote destination, Sensitive file uploaded, Sensitive file uploaded to personal file share website, Sensitive file written to USB storage device, Unauthorized email sent, Unauthorized file read from USB storage device |
|---|---|
| Content inspection patterns |
US Social Security Number (SSN), US Individual Taxpayer Identification Number (ITIN), US Bank Account Number |
USA financial data
This policy group contains templates to detect the presence of sensitive financial information commonly used in the United States of America. Use this group to track and protect sensitive data from an endpoint across various channels, such as web, email, USB, and more.
| Templates |
Cloud sync folder activity, File uploaded or downloaded using unauthorized command, File uploaded or downloaded using unauthorized command, Sensitive content copied and pasted to desktop application, Sensitive content copied and pasted to website, Sensitive file downloaded, Sensitive file downloaded from personal file share website, Sensitive file opened, Sensitive file opened, Sensitive file transferred over RDP from client to server, Sensitive file transferred over RDP from server to client, Sensitive file transferred to remote destination, Sensitive file uploaded, Sensitive file uploaded to personal file share website, Sensitive file written to USB storage device, Unauthorized email sent, Unauthorized file read from USB storage device |
|---|---|
| Content inspection patterns |
Credit or debit card number, American Bankers Association Routing Transit Number (ABA RTN) fraction form, American Bankers Association Routing Transit Number (ABA RTN) Magnetic Ink Character Recognition (MICR) form, US Bank Account Number |