MC256841 – Updates to U.S. Social Security Number sensitive information type definition for improved accuracy

Information Protection

check before: 2021-05-31

Product:

Information Protection - Office 365

Platform:

World tenant, Online

Status:

Change type:

Links:

Details:

To improve the accuracy of the "U.S. Social Security Number" (SSN) sensitive information type, we are making the following changes to its definition: 1. Three discreet confidence levels (High, Medium, and Low) depending on the level of accuracy. The three levels indicate the likelihood of a true positive considering the following: When the SSN was issued. SSNs issued pre-2011 had relatively strong definition due to additional checks. Whether the SSN are formatted (ddd dd dddd or ddd-dd-dddd) or unformatted (ddddddddd). Whether a keyword is found in proximity to the SSN. 2. An additional pattern which does not require mandatory keywords in proximity to reduce false negatives. The current definition requires keywords like "SSN" or "Social Security Number" in proximity to the actual number, which can sometimes lead to valid numbers not being detected (i.e. in an Excel spreadsheet where the supporting keyword is present only in the header row). 3. Added intelligence to detect high volume SSNs in tabular data, like an Excel spreadsheet where keyword is present only in the header of the table. Use "High confidence" or "Medium confidence" in your policy for this. Please note that this requires at least one instance to be detected with a keyword in proximity. See details of current definition vs. new definition below.

Change Category:
XXXXXXX ...

Scope:
XXXXXXX ...

Ring:

Created:
2021-05-18

updated:
2021-05-18

task type:
Stay Informed

the free basic plan is required to see all details. Sign up here


A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.


Login to your account

Welcome Back, We Missed You!