Create a custom Data Posture 360 policy to identify data that meets conditions specific to your organization's security, privacy, compliance, governance, or data management requirements.
A custom policy consists of one or more rules that define the conditions for identifying policy violations. You can combine rules and rule groups to create more specific policy conditions.
Create the policy
-
From the navigation pane, go to Secure > Data Posture 360.
-
Click the Policies tab.
-
Click Add policy.
-
On the General page, configure the following settings:
-
Name: Enter a name for the policy.
-
Category: Select one of the following:
-
Access control
-
Governance
-
Lifecycle
-
Optimization
-
Privacy & Compliance
-
Security
The category describes the purpose of the policy and does not restrict the rules that you can add to the policy.
-
-
Severity: Select the severity for identified violations of the policy.
-
Description: Enter a description of the policy.
-
Guidance: Enter information to help users understand or address violations of the policy.
-
-
Click Next.
-
On the Rules page, define the conditions that data must meet to violate the policy.
For each rule, select an attribute, an operator, and a value.
-
To add another condition, click Add Rule.
-
Specify how multiple conditions are evaluated:
-
ALL: An item must meet all the conditions in the rule group.
-
ANY: An item must meet any of the conditions in the rule group.
-
-
To combine conditions into a separate rule group, click Add Group, and then add the required rules to the group.
Rule groups can contain additional rule groups. For each group, select ALL or ANY to specify how the conditions within that group are evaluated.
-
-
Click Next.
-
Review the policy configuration, and then click Submit.
After the policy is created, Data Posture 360 uses the policy conditions to identify violations in analyzed data. To investigate violations, see Review policies and policy violations in Data Posture 360.