Data is classified

Check ID
APP_0014

Category

Security

Summary

AppControl allows you to define a data policy for your application that classifies all entities and attributes according to their sensitivity level. This check verifies that a data policy exists for the application and that the classification is complete — meaning every module, entity, and attribute has been assigned a data classification level and has been reviewed for personal data.

Completing data classification is a foundational step in understanding your application's data exposure and is required by several other policy checks that evaluate access controls against classification levels.

Options

There are no options for this check.

Pass

A data policy exists for the application and all modules, entities, and attributes have a classification level assigned and have been reviewed for personal data.

Fail

No data policy exists for the application, or one or more modules, entities, or attributes have not yet been classified. Navigate to the data policy for this application and ensure that all items show a status of Complete in the Classify Data tab.

Last updated