Custom sensitive information types are configured

Overview

Custom sensitive information types (SITs) extend Microsoft Purview’s ability to detect sensitive information beyond the built-in SITs to cover organization-specific data patterns, proprietary identifiers, internal classification schemes, specialized industry codes, or other formats that built-in SITs don’t look for. Use them to create tailored detection rules that align with your organization’s unique data protection needs, ensuring that more sensitive information is accurately identified and protected.

Remediation

• Create custom sensitive information types

Run it

The check runs as part of the whole assessment, with the ZeroTrustAssessment module installed:

Install-Module ZeroTrustAssessment -Scope CurrentUser
Connect-Maester
Invoke-Maester -Pack ZTA -SkipBuiltIn

Leave out -SkipBuiltIn to run Maester’s own checks in the same run.

About this check

Severity	High
Effort to fix	High
Impact on users	Medium
Pillar	Data, AI
Category	Advanced Classification
Product	Purview
Feature	Data classification
Area	Data protection
Licence	EXCHANGE_S_ENTERPRISE
Tenant	Workforce

Product, feature, area and ATT&CK are Maester’s: the assessment does not record them, so Maester keeps them in the pack’s taxonomy.json.

A Microsoft check, part of the Zero Trust Assessment pack. Text from ZeroTrustAssessment 3.1.0, © Microsoft, MIT licence.