Exact Data Match is configured for sensitive information detection

Overview

Exact data match (EDM) is an advanced sensitive information type that detects organization-specific data by matching exact values against an uploaded reference database. Unlike pattern-based sensitive information types (SITs) that detect common formats, EDM identifies things like customer lists, employee IDs, or proprietary codes unique to your organization. By configuring EDM-based SITs, you can significantly enhance the accuracy of sensitive information detection in Microsoft Purview, ensuring that critical data is properly identified and protected.

Remediation

• Learn about exact data match based sensitive information types
• Get started with exact data match based sensitive information types

Run it

The check runs as part of the whole assessment, with the ZeroTrustAssessment module installed:

Install-Module ZeroTrustAssessment -Scope CurrentUser
Connect-Maester
Invoke-Maester -Pack ZTA -SkipBuiltIn

Leave out -SkipBuiltIn to run Maester’s own checks in the same run.

About this check

Severity	High
Effort to fix	Medium
Impact on users	Medium
Pillar	Data, AI
Category	Advanced Classification
Product	Purview
Feature	Data classification
Area	Data protection
Licence	EXCHANGE_S_ENTERPRISE
Tenant	Workforce, External

Product, feature, area and ATT&CK are Maester’s: the assessment does not record them, so Maester keeps them in the pack’s taxonomy.json.

A Microsoft check, part of the Zero Trust Assessment pack. Text from ZeroTrustAssessment 3.1.0, © Microsoft, MIT licence.