Revalidating Data Policy Violations

Once a data policy is triggered by a specified condition, you can use the Scan Jobs tab within the Policy Details to track the rescan status of the data source and violation results return.

Important:

Currently rescans are limited to Catalog scan type only.

To rescan for violations

Once you have remediated the data source for the given violation, you can perform a rescan to refresh the data policy against the data source and inspect for a lowered violations count. Rescanning promotes data risk mitigation practices for scenarios like file deletion and updating shared access levels.

This also permits policy managers to know where sensitive files are shared internally/externally so ensure those files have the appropriate access levels. To do this, the data policy conditions will need to reflect the desired access level to detect violations with the incorrect levels.

Rescan of violations is supported for the following data sources:

  • Amazon S3

  • Box

  • Google Drive

  • OneDrive

  • Salesforce

  • SharePoint

  • SMB

Important:

Currently rescans are limited to Catalog scan type only. The Rescan option in the Actions selection field is only displayed for data sources that support rescan.

  1. On the Data Catalog menu, select Policy Manager > Data Policies.

    The Data Policies screen appears.

  2. Select the name of a data policy.

    The Policy Details screen appears.

  3. Go to the Violations tab.
  4. Click the Rescan button for a given data source.
    Tip:

    You can also access this option from the Violations tab, under Actions > Rescan.

    The Rescan All Data modal appears.

  5. Click the Yes, Start Scan button to confirm the rescan of the identified data source. The data resource will be rescanned and a scan job will be created.
    Note:

    For more information, see Revalidating Data Policy Violations.

  6. If the necessary remediation occurred in the data source, the violations refresh will reflect a lower count.

To access scan jobs

  1. On the Data Catalog menu, select Policy Manager > Data Policies.

    The Data Policies screen appears.

  2. Select the name of an enabled data policy.

    The Policy Details screen appears.

  3. Go to the Scan Jobs tab.
  4. The screen will log all scan jobs ran against the data policy, which could be for multiple data sources with their own unique count of violations. It captures the following details:

    Policy details screen

    • Name

    • Scan Status

    • Scan Type

    • Scan Object

    • Results Publish Status

    • Run By

    • Created Date

    • Last Updated Date

  5. Click the scan job link to open a separate browser tab to review the associated Scan Job Details screen.
  6. The following are available statuses for rescans.

    Scan Status

    Results Publish Status

    • Pending

    • Completed

    • Awaiting Results

    • Results Published